An Organization Is Setting a Website on the AWS VPC

question 439

Multiple Choice

An organization is setting a website on the AWS VPC. The organization has blocked a few IPs to avoid a D-DOS attack. How can the organization configure that a request from the above mentioned IPs does not access the application instances?

• A) Create an IAM policy for VPC which has a condition to disallow traffic from that IP address.
• B) Configure a security group at the subnet level which denies traffic from the selected IP.
• C) Configure the security group with the EC2 instance which denies access from that IP address.
• D) Configure an ACL at the subnet which denies the traffic from that IP address.