A company needs to automatically protect its Amazon EC2 instances from distributed denial of service (DDoS) attacks. Which AWS service or tool will provide this protection?

The correct answer is B. AWS Shield. AWS Shield is a managed DDoS protection service that automatically safeguards applications running on AWS, including EC2 instances, from common and large-scale DDoS attacks. Network ACL provides basic traffic filtering but does not protect against DDoS. Security group acts as a v

Submitted by tyler.j· Mar 6, 2026Security and Compliance

Question

Options

ANetwork access control list (ACL)
BAWS Shield
CSecurity group
DAmazon GuardDuty

How the community answered

(30 responses)

A
3% (1)
B
87% (26)
C
7% (2)
D
3% (1)

Explanation

AWS Shield is a managed DDoS protection service that automatically safeguards applications running on AWS, including EC2 instances, from common and large-scale DDoS attacks. Network ACL provides basic traffic filtering but does not protect against DDoS. Security group acts as a virtual firewall for EC2, but it does not offer DDoS mitigation. Amazon GuardDuty is a threat detection service that analyzes logs for suspicious activity, but it does not actively block DDoS attacks.

Community Discussion

No community discussion yet for this question.

Full CLF-C02 Practice