A company is hosting a web application that is sitting behind an Application Load Balancer. There is a plan to use the AWS WAF service to protect the application from various sorts of attacks. There is also a requirement to prevent traffic from a specific country. How can this be achieved?

Answer options:

A.Create an IP Match Condition in the WAF web ACL.
B.Create a Geographic Match Condition rule and add the rule in the WAF web ACL.
C.Create a Geographic Match Condition and add the condition in the WAF rule group. Activate the rule group.
D.Create a Geographic Match Condition in WAF web ACL and add the ACL in the WAF rule. Activate the rule.

Answer - B
This is mentioned in the AWS Documentation.
If you want to allow or block web requests based on the country that the requests originate from, create one or more geo match conditions. A geo match condition lists countries that your requests originate from. Later in the process, you specify whether to allow or block requests from those countries when you create a web ACL.
Option A is incorrect since this is used to allow or block requests based on the IP addresses that they originate from.
Option C is incorrect because the rule group should be added to the web ACL. The rule group itself cannot be activated.
Option D is incorrect because the Geographic Match Condition should be created in a rule group instead of the web ACL, and you cannot add a web ACL to a rule. The description of the option is inaccurate.
For more information on working with Web ACL geo conditions, please visit the below URL
https://docs.aws.amazon.com/waf/latest/developerguide/web-acl-geo-conditions.html