To improve the security profile of your VPC, you want to block traffic from 'Known Malicious IP addresses' at the network level using a managed list. Which service and feature provides this?

Direct Answer (Verified)Reviewed by Sunny (Senior Cloud Engineer)

Correct Answer: AWS Network Firewall (with managed rule groups)

Managed rule groups in Network Firewall provide a collection of pre-defined rules to protect against common threats....

📋Part of AWS Certified DevOps Engineer – Professional (DOP-C02) · AWS Certification Practice
Real Exam ScenarioScenario Based

To improve the security profile of your VPC, you want to block traffic from 'Known Malicious IP addresses' at the network level using a managed list. Which service and feature provides this?

✓ Correct Answer & ExplanationScenario Based

Correct Answer

AWS Network Firewall (with managed rule groups)

Why This Answer Is Correct

Managed rule groups in Network Firewall provide a collection of pre-defined rules to protect against common threats.

📚 What This Question Tests

This question evaluates your knowledge of Scenario Based — a core concept tested in AWS Certified DevOps Engineer – Professional (DOP-C02). Understanding Scenario Based is essential for designing scalable, secure, and cost-effective cloud architectures. Mastery of this topic will help you answer scenario-based questions confidently on exam day.