AWS SAA-C03 · Question 13 · Domain 1.2: Secure Workloads
A company wants to secure its VPC network. They need to explicitly deny traffic from a specific malicious IP address from reaching their EC2 instances. Which TWO methods can be used to achieve this? (Select TWO.)
Answer options:
Add a deny rule to the Security Group attached to the EC2 instances.
Add a deny rule to the Network ACL associated with the subnet.
Use AWS WAF to block the IP address if the traffic is HTTP/HTTPS via an ALB.
Configure an AWS Transit Gateway to drop the packets.
Modify the VPC Route Table to route the IP to a blackhole.
65 questions · hints · full answers · grading
Expert