An Education Company Is Running a Web Application Used by College

question 823

Multiple Choice

An education company is running a web application used by college students around the world. The application runs in an Amazon Elastic Container Service (Amazon ECS) cluster in an Auto Scaling group behind an Application Load Balancer (ALB) . A system administrator detects a weekly spike in the number of failed login attempts, which overwhelm the application's authentication service. All the failed login attempts originate from about 500 different IP addresses that change each week. A solutions architect must prevent the failed login attempts from overwhelming the authentication service. Which solution meets these requirements with the MOST operational efficiency?

• A) Use AWS Firewall Manager to create a security group and security group policy to deny access from the IP addresses
• B) Create an AWS WAF web ACL with a rate-based rule, and set the rule action to Block. Connect the web ACL to the ALB
• C) Use AWS Firewall Manager to create a security group and security group policy to allow access only to specific CIDR ranges
• D) Create an AWS WAF web ACL with an IP set match rule, and set the rule action to Block. Connect the web ACL to the ALB

---

Definitions:

Unconditional Response

A natural, unlearned reaction to an unconditioned stimulus, a term primarily used in the context of classical conditioning in behavioral psychology.

Primary Circular Reaction

The term Piaget used to describe the infant’s tendency to repeat pleasurable bodily actions for their own sake.

Sucks His Fingers

A natural reflex for infants, often for comfort or self-soothing.

Classical Conditioning

A learning process that pairs a neutral stimulus with a response-producing stimulus, eventually causing the neutral stimulus to elicit the response on its own.