SAA-C03 · Question #367
A retail company runs its application on AWS. The application uses Amazon EC2 for web servers, Amazon RDS for database services, and Amazon CloudFront for global content distribution. The company…
The correct answer is B. Enable AWS Shield Advanced. Configure CloudFront to work with Shield Advanced. AWS Shield Advanced provides advanced DDoS protection for AWS workloads, including EC2, CloudFront, and RDS. When integrated with CloudFront, Shield Advanced offers comprehensive detection and mitigation against large and sophisticated DDoS attacks, along with 24x7 access to…
Question
A retail company runs its application on AWS. The application uses Amazon EC2 for web servers, Amazon RDS for database services, and Amazon CloudFront for global content distribution. The company needs a solution to mitigate DDoS attacks. Which solution will meet this requirement?
Options
- AImplement AWS WAF custom rules to limit the length of query requests. Configure CloudFront to
- BEnable AWS Shield Advanced. Configure CloudFront to work with Shield Advanced.
- CUse Amazon Inspector to scan the EC2 instances. Enable Amazon GuardDuty.
- DEnable Amazon Macie. Configure CloudFront Origin Shield.
How the community answered
(42 responses)- A2% (1)
- B88% (37)
- C2% (1)
- D7% (3)
Explanation
AWS Shield Advanced provides advanced DDoS protection for AWS workloads, including EC2, CloudFront, and RDS. When integrated with CloudFront, Shield Advanced offers comprehensive detection and mitigation against large and sophisticated DDoS attacks, along with 24x7 access to the AWS DDoS Response Team (DRT). AWS WAF provides application-level protection, but for complete DDoS mitigation, Shield Advanced is the recommended solution.
Community Discussion
No community discussion yet for this question.