A company needs to block website access from users in specific countries. Which AWS service should they use to enforce this restriction?
Choose an answer
Tap an option to check your answer.
Correct answer: AWS WAF.
Why this is the answer
AWS WAF (Web Application Firewall) is the correct service because it allows you to monitor web requests forwarded to Amazon CloudFront, an Application Load Balancer, Amazon API Gateway, or AWS AppSync. You can configure WAF rules, including geo-match rules, to block or allow requests based on the country of origin. This directly addresses the requirement to block website access from specific countries. AWS Control Tower helps set up and govern a secure, multi-account AWS environment but doesn't provide granular web traffic filtering. Amazon Fraud Detector identifies potentially fraudulent online activities, which is different from geo-blocking. Amazon Pinpoint is a marketing communication service for engaging customers across channels, not for web access control.
Pass your exam — without the endless answer hunt
Get every verified question and explanation for this exam in one place, and save hours of prep. 1,000+ certifications · 20+ languages · free to start.
Pass your exam faster → No card needed