AWS Certified Security - Specialty SCS-C02 — Topic 1 Question 162

Question

A company has a web-based application that runs behind an Application Load Balancer (ALB). The application is experiencing a credential stuffing attack that is producing many failed login attempts. The attack is coming from many IP addresses. The login attempts are using a user agent string of a known mobile device emulator. A security engineer needs to implement a solution to mitigate the credential stuffing attack. The solution must still allow legitimate logins to the application. Which solution will meet these requirements?

Accepted Answer

Correct answer: C. The correct answer is C. Option C: Create an AWS WAF web ACL for the ALB Create a custom rule that blocks requests that contain the user agent string of the device emulator. AWS WAF protects web applications from common exploits and malicious requests.

AWS Certified Security - Specialty SCS-C02 — Question 162