A Start-up company is planning to deploy a blogging site with WordPress. This site will be deployed on an Amazon EC2 instance behind an ALB. For securing this site, AWS WAF with Managed rules is configured by the Sysops Team. The Operations Team is observing some legitimate traffic to this site is getting dropped and is looking for your support for the resolution.
Which of the following can be configured to remediate this issue?

Answer options:

A.Configure rules in the AWS Managed rules group as a regular rule.
B.Configure rules in the AWS Managed rules group as rate-based rules.
C.Configure rules in the AWS Managed rules group in count mode.
D.Configure rules in the AWS Managed rules group with scope-down statements.

Correct Answer: C
AWS Managed Rules are pre-defined, ready-to-use AWS WAF rules created by AWS or third-party vendors. These rules are an easy way to secure websites from common vulnerabilities for web applications like WordPress, Joomla, or PHP. If legitimate traffic is getting blocked with these rules, rules in an AWS Managed rules group can be configured in count mode, allowing traffic. Further analysis can be done using AWS WAF logs to identify rules causing traffic to be dropped.
Options A & B are incorrect as rules with the AWS Managed rules group cannot be viewed or modified. Actions by these rules can be overridden using count mode which will stop blocking the traffic.
Option D is incorrect as AWS Managed rules with a scope-down statement will not be effective for allowing legitimate traffic.
For more information on managed rules with AWS WAF, refer to the following URL,
https://docs.aws.amazon.com/waf/latest/developerguide/aws-managed-rule-groups.html