Question
A company hosts a cloud-based e-commerce application and only wants the application accessed from certain locations. The network team configures a cloud firewall with WAF enabled, but users can access the application globally. Which of the following should the network team do?
- A. Reconfigure WAF rules.
- B. Configure a NAT gateway.
- C. Implement a CDN.
- D. Configure geo-restriction. Correct
Explanation
Geo-restriction (geo-blocking) allows or denies requests based on the country or region of the client IP address, which is exactly what limits access to certain locations. Generic WAF rules inspect requests for attacks such as SQL injection and do not by themselves limit geography. A NAT gateway handles outbound address translation, and a CDN improves delivery speed rather than restricting who can connect.
