AWS Certified Solutions Architect - Professional
Get started today
Ultimate access to all questions.
Comments
Loading comments...
Ultimate access to all questions.
A company operates a website hosted on Amazon EC2 instances behind an Application Load Balancer (ALB), which is part of an Auto Scaling group and is protected by an AWS WAF web ACL. The website frequently experiences application-layer attacks causing abrupt spikes in traffic, with each attack originating from unique IP addresses. A solutions architect is tasked with implementing a mitigation strategy that minimizes operational overhead. Which solution is most effective?
A
Set up an Amazon CloudWatch alarm to monitor access patterns, establish a threshold based on IP address activity, and configure the alarm to automatically add offending IP addresses to the web ACL’s deny list.
B
Enhance protection by deploying AWS Shield Advanced alongside AWS WAF, ensuring the ALB is designated as a protected resource.
C
Create an Amazon CloudWatch alarm to track IP address usage, set a threshold for unusual activity, and program the alarm to trigger an AWS Lambda function that inserts a deny rule into the application server’s subnet route table for any suspicious IP addresses.
D
Analyze access logs to identify patterns from attacking IP addresses and utilize an Amazon Route 53 geolocation routing policy to block traffic from the countries associated with these IP addresses.