ANS-C01 Network Security, Compliance and Governance Practice Question
A company is using AWS WAF to protect its web application. The security team notices that the WAF logs show a high number of requests from a specific IP address range that are being blocked by the SQL injection rule. However, the application team reports that legitimate users from that IP range are unable to access the application. Which action should the security team take to resolve this issue while maintaining security?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Create a rate-based rule to limit requests from the IP range.
Creating a rate-based rule can limit the request rate from the specific IP range, allowing legitimate traffic while still blocking excessive requests that may be part of a SQL injection attempt. This maintains security by not outright allowing the IP range or disabling protections. Option A is wrong because disabling the SQL injection rule for the IP range removes protection against actual SQL injection attacks from that range. Option B is wrong because increasing the rate limit for the entire WAF is not granular and may affect other traffic. Option C is wrong because adding the IP range to the allow list completely bypasses security, leaving the application vulnerable.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Disable the SQL injection rule for the specific IP range.
Why it's wrong here
Disabling the SQL injection rule for the IP range removes protection against actual SQL injection attacks from that range, which is not recommended.
- ✗
Increase the rate limit for the entire WAF.
Why it's wrong here
Increasing the rate limit for the entire WAF is not granular enough; it affects all traffic and does not address the specific IP range issue.
- ✗
Add the IP range to the allow list in the WAF.
Why it's wrong here
Adding the IP range to the allow list completely bypasses all WAF rules, including the SQL injection rule, leaving the application vulnerable.
- ✓
Create a rate-based rule to limit requests from the IP range.
Why this is correct
Creating a rate-based rule limits the request rate from the IP range, allowing legitimate traffic while still blocking excessive requests that may indicate an attack.
Visual reference
Go deeper
Related to this question
About these practice questions
Courseiva writes every ANS-C01 question from scratch — 1,621 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This ANS-C01 practice question is part of Courseiva's free Amazon Web Services certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the ANS-C01 exam.