Exam AWS Certified Solutions Architect - Associate SAA-C02 topic 1 question 658 discussion

Exam question from Amazon's AWS Certified Solutions Architect - Associate SAA-C02

Question #: 658
Topic #: 1

[All AWS Certified Solutions Architect - Associate SAA-C02 Questions]

A company has an application that serves clients that are deployed in more than 20,000 retail storefront locations around the world. The application consists of backend web services that are exposed over HTTPS on port 443. The application is hosted on Amazon EC2 instances behind an Application Load Balancer
(ALB). The retail locations communicate with the web application over the public internet. The company allows each retail location to register the IP address that the retail location has been allocated by its local ISP.
The company's security team recommends to increase the security of the application endpoint by restricting access to only the IP addresses registered by the retail locations.
What should a solutions architect do to meet these requirements?

A. Associate an AWS WAF web ACL with the ALB. Use IP rule sets on the ALB to filter traffic. Update the IP addresses in the rule to include the registered IP addresses.
B. Deploy AWS Firewall Manager to manage the ALB. Configure firewall rules to restrict traffic to the ALB. Modify the firewall rules to include the registered IP addresses.
C. Store the IP addresses in an Amazon DynamoDB table. Configure an AWS Lambda authorization function on the ALB to validate that incoming requests are from the registered IP addresses.
D. Configure the network ACL on the subnet that contains the public interface of the ALB. Update the ingress rules on the network ACL with entries for each of the registered IP addresses.

Show Suggested Answer

Suggested Answer: A 🗳️

by guptatrng at Sept. 9, 2022, 5:32 a.m.

Disclaimers:

- ExamTopics website is not related to, affiliated with, endorsed or authorized by Amazon.
- Trademarks, certification & product names are used for reference only and belong to Amazon.

Comments

Submit Cancel

rodriiviru

2 years, 8 months ago

Selected Answer: A

AWS WAF is a web application firewall that lets you monitor the HTTP(S) requests that are forwarded to your protected web application resources. You can protect the following resource types: Amazon CloudFront distribution Amazon API Gateway REST API Application Load Balancer AWS AppSync GraphQL API Amazon Cognito user pool AWS WAF also lets you control access to your content. Based on criteria that you specify, such as the IP addresses that requests originate from. https://docs.aws.amazon.com/waf/latest/developerguide/waf-chapter.html

upvoted 1 times

...

guptatrng

2 years, 9 months ago

Both A and D should work..

upvoted 2 times

...