A Solutions Architect Is Performing a Security Review of a Recently

question 477

Multiple Choice

A solutions architect is performing a security review of a recently migrated workload. The workload is a web application that consists of Amazon EC2 instances in an Auto Scaling group behind an Application Load Balancer. The solutions architect must improve the security posture and minimize the impact of a DDoS attack on resources. Which solution is MOST effective?

• A) Configure an AWS WAF ACL with rate-based rules. Create an Amazon CloudFront distribution that points to the Application Load Balancer. Enable the WAF ACL on the CloudFront distribution.
• B) Create a custom AWS Lambda function that adds identified attacks into a common vulnerability pool to capture a potential DDoS attack. Use the identified information to modify a network ACL to block access.
• C) Enable VPC Flow Logs and store then in Amazon S3. Create a custom AWS Lambda functions that parses the logs looking for a DDoS attack. Modify a network ACL to block identified source IP addresses.
• D) Enable Amazon GuardDuty and configure findings written to Amazon CloudWatch. Create an event with CloudWatch Events for DDoS alerts that triggers Amazon Simple Notification Service (Amazon SNS). Have Amazon SNS invoke a custom AWS Lambda function that parses the logs, looking for a DDoS attack. Modify a network ACL to block identified source IP addresses.

---

Definitions:

Blood Sugar Level

A measure of the amount of glucose present in the blood, which is a critical aspect of metabolic health and is closely regulated in the human body.

Receptors In Liver

Proteins located in the liver that bind substances like hormones and drugs, playing a crucial role in metabolism and detoxification.

Hippocampus

A region of the brain critical for the formation of new memories and involved in learning and emotions.

Estrus

The periodic sexual excitement of many female mammals as governed by levels of sex hormones.