Q41 — AWS SAA-C03 Ch.2
Question 41 of 65 | ← Chapter 2
Q106. A company that has a global user base is launching a new service. The service is highly anticipated because of along marketing campaign. The company has built the service on Amazon EC2 instances that run behind an Application Load Balancer (ALB).The company uses an Amazon RDS for MySQL DB instance and Amazon S3 to store data.Previously, the company experienced a large-scale cyberattack that originated from a specific country where the company has no user base. Before the launch of the service, the company wants to block all traffic that originates from that specific country.Which solution will meet this requirement?
- A. Create an EC2 security group to deny any traffic that comes from the specific country's CIDR ranges.Attach the security group to the ALB
- B. Create an RDS security group to deny any traffic that comes from the specific country's CIDR ranges Attach the security group to the DB instance
- C. Create a Deny statement on the S3 bucket policy. Use a condition that specifies which country code to deny access to
- D. Create an AWS WAF web ACL that has a rule to block the traffic based on a geographical match condition. Associate the web ACL with the ALB ✓