MENU
A company notices suspicious network activity against an application that is running on a fleet of Amazon EC2 instances. The suspicious activity is coming from a single IP address.
Which AWS service should the company use to block access from this IP address?
Suggested Answer: D
Get Premium CLF-C02 Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
AWS WAF Overview:
AWS Web Application Firewall (WAF) allows users to create rules to block or allow traffic based on IP addresses, request patterns, and other conditions.
It is ideal for blocking traffic from a specific IP address.
Why AWS WAF Meets the Requirement:
The company can create a WAF rule to block traffic from the malicious IP address.
WAF integrates with services like Amazon CloudFront, Application Load Balancer, and API Gateway.
Why Other Options Are Incorrect:
A . AWS Shield: Protects against DDoS attacks but does not allow custom IP blocking.
B . AWS Config: Monitors resource configurations but does not block IPs.
C . Amazon GuardDuty: Detects threats but does not block traffic directly.
35 comments · newest first
ST
Stephaine
11 months ago
AWS Shield is for DDoS, not IP blocking!
AL
Almeta
11 months ago
Surprised people still confuse these services!
NO
Noble
11 months ago
WAF is the right choice here, no doubt!
AL
Alease
11 months ago
I thought GuardDuty was the way to go?
LY
Lyndia
12 months ago
Definitely AWS WAF for blocking IPs!
TH
Thomasena
12 months ago
I feel like AWS Shield is more about DDoS protection, so it probably isn't the answer here.
FE
Fernanda
1 year ago
I’m a bit confused; I thought GuardDuty was for detecting threats, not blocking them. Is that right?
SU
Sueann
1 year ago
I remember practicing a question about blocking IPs, and I think it was AWS WAF that we used in that scenario too.
MA
Madonna
1 year ago
I think AWS WAF might be the right choice here since it can block specific IP addresses, but I'm not completely sure.
MY
Myra
1 year ago
AWS WAF is the way to go. It gives you granular control to block specific IP addresses that are causing issues.
RY
Ryan
1 year ago
I'm a bit confused on the differences between the AWS security services. I'll need to review the details of each one to determine the best fit.
MI
Mindy
1 year ago
AWS WAF is the obvious choice here. It's designed specifically for web application firewall functionality, which is exactly what we need to block that IP.
WI
Wilson
1 year ago
Hmm, I'm not too familiar with AWS security services. I'll have to think this through carefully to make sure I pick the right one.
KA
Katlyn
1 year ago
This seems like a straightforward security question. I'd go with AWS WAF to block the suspicious IP address.
BU
Buddy
2 years ago
Hmm, I'd say D) AWS WAF. It's like having a virtual bodyguard for your web app, keeping the bad guys at bay.
LI
Lisha
2 years ago
I see your point. It's always good to have multiple layers of security in place.
BE
Bernardine
2 years ago
That's true, but I think D) AWS WAF would be more effective in this situation.
PE
Pete
2 years ago
But what about using A) AWS Shield? It's specifically designed to protect against DDoS attacks.
LA
Laura
2 years ago
I agree, D) AWS WAF is a good choice to block access from that suspicious IP address.
PE
Pearlene
2 years ago
I bet the answer is D) AWS WAF. It's like having a bouncer at the door, kicking out the troublemakers before they can cause any real damage.
CR
Cristy
2 years ago
Yeah, AWS WAF can help block that suspicious IP address.
PH
Phuong
2 years ago
I think you're right, D) AWS WAF is the way to go.
BI
Billi
2 years ago
Yeah, AWS WAF acts like a bouncer for your application, keeping out unwanted traffic from that single IP address.
SA
Santos
2 years ago
I think you're right, AWS WAF is the way to go. It can help block those suspicious activities.
DA
Dalene
2 years ago
I'm not sure, but I think AWS Shield could also be a good option to protect against DDoS attacks.
TR
Tresa
2 years ago
I agree with Marnie. AWS WAF is specifically designed to protect web applications from common web exploits.
VA
Valene
2 years ago
C) Amazon GuardDuty can detect and respond to suspicious activity, but AWS WAF is the right choice for actively blocking the IP address.
PA
Paola
2 years ago
Yes, GuardDuty can detect it, but WAF is the best option for actively blocking it.
ED
Edda
2 years ago
But wouldn't Amazon GuardDuty be better for detecting and responding to the activity?
CH
Chaya
2 years ago
I think we should use AWS WAF to block access from that suspicious IP address.
MA
Marnie
2 years ago
I think the company should use AWS WAF to block access from the suspicious IP address.
KR
Kristel
2 years ago
D) AWS WAF is the way to go. It's designed specifically for blocking suspicious IP addresses and protecting web applications.
SA
Sabine
2 years ago
Let's set up AWS WAF to block that suspicious activity.
SE
Sean
2 years ago
Agreed, AWS WAF is the best option for protecting web applications.
JE
Jennifer
2 years ago
We should use AWS WAF to block access from that IP address.