To protect against L7 DDoS attacks that target your Application Load Balancer by sending requests that mimic legitimate browser traffic, which WAF feature is most effective?

Direct Answer (Verified)Reviewed by Sunny (Senior Cloud Engineer)

Correct Answer: WAF Bot Control and IP Reputation lists

Bot Control identifies sophisticated bot patterns, and IP Reputation lists block traffic from known malicious actors....

📋Part of AWS Certified Solutions Architect – Professional (SAP-C02) · AWS Certification Practice
Real Exam ScenarioAmazon CloudFront

To protect against L7 DDoS attacks that target your Application Load Balancer by sending requests that mimic legitimate browser traffic, which WAF feature is most effective?

✓ Correct Answer & ExplanationAmazon CloudFront

Correct Answer

WAF Bot Control and IP Reputation lists

Why This Answer Is Correct

Bot Control identifies sophisticated bot patterns, and IP Reputation lists block traffic from known malicious actors.

📚 What This Question Tests

This question evaluates your knowledge of Amazon CloudFront — a core concept tested in AWS Certified Solutions Architect – Professional (SAP-C02). Understanding Amazon CloudFront is essential for designing scalable, secure, and cost-effective cloud architectures. Mastery of this topic will help you answer scenario-based questions confidently on exam day.