AWS WAF Rule Configuration Quiz

What you'll be asked

1. Which AWS WAF feature allows you to block requests based on the geographic location of the request's origin?
2. You want to prevent a brute-force attack on your login page by limiting the number of requests a single IP can make in a 5-minute window. Which rule type should you use?
3. When configuring a WAF Web ACL, what is the significance of the rule processing order?
4. You are deploying a managed rule group to protect against common web vulnerabilities. You want to test the rule group without actually blocking any traffic. Which action should you set on the rule group?
5. You have a Web ACL containing a custom rule that blocks a specific IP set, followed by a Managed Rule Group that detects malicious bots. If an IP from the blocked set triggers the Managed Rule Group, what is the result?

Answers and explanations come after you submit.