Exam AWS Certified Solutions Architect - Associate SAA-C02 topic 1 question 99 discussion

Exam question from Amazon's AWS Certified Solutions Architect - Associate SAA-C02

Question #: 99
Topic #: 1

[All AWS Certified Solutions Architect - Associate SAA-C02 Questions]

A company's web application is running on Amazon EC2 instances behind an Application Load Balancer. The company recently changed its policy, which now requires the application to be accessed from one specific country only.
Which configuration will meet this requirement?

A. Configure the security group for the EC2 instances.
B. Configure the security group on the Application Load Balancer.
C. Configure AWS WAF on the Application Load Balancer in a VPC.
D. Configure the network ACL for the subnet that contains the EC2 instances.

Show Suggested Answer

Suggested Answer: C 🗳️

by josebormo at Aug. 10, 2020, 9:20 a.m.

Disclaimers:

- ExamTopics website is not related to, affiliated with, endorsed or authorized by Amazon.
- Trademarks, certification & product names are used for reference only and belong to Amazon.

Comments

Submit Cancel

josebormo

Highly Voted 3 years, 7 months ago

I agree it is C, see https://aws.amazon.com/es/blogs/security/how-to-use-aws-waf-to-filter-incoming-traffic-from-embargoed-countries/

upvoted 45 times

aguy9

3 years, 7 months ago

I agree, answer is C

upvoted 6 times

...

Paitan

Highly Voted 3 years, 7 months ago

WAF with ALB is the right option.

upvoted 21 times

...

1e10f28

Most Recent 11 months, 2 weeks ago

Why option B is wrong?

upvoted 1 times

...

Uzbekistan

1 year, 2 months ago

Selected Answer: C

C. Configure AWS WAF on the Application Load Balancer in a VPC. By configuring AWS WAF on the Application Load Balancer, you can create rules to allow or deny requests based on the geographic location of the client IP address. This will effectively restrict access to the application to users from the specified country only.

upvoted 1 times

...