Malicious traffic is reaching company web servers. A SysOps Administrator is tasked with blocking this traffic. The malicious traffic is distributed over many IP addresses and represents much higher traffic than is typically seen from legitimate users. How should the Administrator protect the web servers?
A) Create a security group for the web servers and add deny rules for malicious sources.
B) Set the network access control list for the web servers' subnet and add deny entries.
C) Place web servers behind AWS WAF and establish the rate limit to create a blacklist.
D) Use Amazon CloudFront to cache all pages and remove the traffic from the web servers.

Question

Quizplus · Accepted Answer

AWS WAF can be used to set rate-based rules to automatically block IP addresses that exceed a certain request threshold, effectively mitigating distributed malicious traffic.

Malicious Traffic Is Reaching Company Web Servers