A solutions architect needs to deny traffic from a specific malicious IP range at the subnet boundary. Security groups only support allow rules. Which control can explicitly DENY the IP range?
Network Security
Security groups, network ACLs, AWS WAF, Shield, and securing VPC traffic.
Domain 1: Design Secure Architectures · 30% of exam · 8 questions
Question 1 of 8 · keys: 1–5 select, Enter submit, ← → navigate