nerdexam
Amazon

SAA-C03 · Question #485

A company wants to protect resources that the company hosts on AWS, including Application Load Balancers and Amazon CloudFront distributions. The company wants an AWS service that can provide near rea

The correct answer is D. AWS Shield Advanced. AWS Shield Advanced provides: Advanced DDoS detection and mitigation 24/7 access to the AWS DDoS Response Team (DRT) Real-time metrics and alerts via CloudWatch Integrated with CloudFront, ALB, Route 53, and Global Accelerator "Shield Advanced provides enhanced detection and miti

Submitted by yasin.bd· Mar 4, 2026Design Secure Architectures

Question

A company wants to protect resources that the company hosts on AWS, including Application Load Balancers and Amazon CloudFront distributions. The company wants an AWS service that can provide near real-time visibility into attacks on the company's resources. The service must also have a dedicated AWS team to assist with DDoS attacks. Which AWS service will meet these requirements?

Options

  • AAWS WAF
  • BAWS Shield Standard
  • CAmazon Macie
  • DAWS Shield Advanced

How the community answered

(18 responses)
  • B
    6% (1)
  • C
    6% (1)
  • D
    89% (16)

Explanation

AWS Shield Advanced provides: Advanced DDoS detection and mitigation 24/7 access to the AWS DDoS Response Team (DRT) Real-time metrics and alerts via CloudWatch Integrated with CloudFront, ALB, Route 53, and Global Accelerator "Shield Advanced provides enhanced detection and mitigation for more sophisticated DDoS attacks and gives you access to the AWS DDoS Response Team (DRT)." Incorrect Options: A (AWS WAF): For application-layer filtering only. B (Shield Standard): Basic protection, no DRT or attack visibility. C (Macie): Used for discovering sensitive data in S3, unrelated to DDoS.

Community Discussion

No community discussion yet for this question.

Full SAA-C03 Practice