SAP-C02 · Question #426
A company has a website that runs on Amazon EC2 instances behind an Application Load Balancer (ALB). The instances are in an Auto Scaling group. The ALB is associated with an AWS WAF web ACL. The…
The correct answer is B. Deploy AWS Shield Advanced in addition to AWS WAF. Add the ALB as a protected resource. AWS Shield Advanced is a paid version of the service that provides additional protection against large scale and sophisticated DDoS attacks. This version includes all the features of the Basic version, but with additional capabilities such as 24/7 availability, a dedicated DDoS…
Question
A company has a website that runs on Amazon EC2 instances behind an Application Load Balancer (ALB). The instances are in an Auto Scaling group. The ALB is associated with an AWS WAF web ACL. The website often encounters attacks in the application layer. The attacks produce sudden and significant increases in traffic on the application server. The access logs show that each attack originates from different IP addresses. A solutions architect needs to implement a solution to mitigate these attacks. Which solution will meet these requirements with the LEAST operational overhead?
Options
- ACreate an Amazon CloudWatch alarm that monitors server access. Set a threshold based on
- BDeploy AWS Shield Advanced in addition to AWS WAF. Add the ALB as a protected resource.
- CCreate an Amazon CloudWatch alarm that monitors user IP addresses. Set a threshold based on
- DInspect access logs to find a pattern of IP addresses that launched the attacks. Use an Amazon
How the community answered
(58 responses)- A33% (19)
- B43% (25)
- C17% (10)
- D7% (4)
Explanation
AWS Shield Advanced is a paid version of the service that provides additional protection against large scale and sophisticated DDoS attacks. This version includes all the features of the Basic version, but with additional capabilities such as 24/7 availability, a dedicated DDoS response team, and advanced attack analytics and reporting. Additionally, AWS Shield Advanced provides access to advanced DDoS protection and mitigation capabilities, such as the ability to customize protections for specific application requirements, and to mitigate attacks more quickly and
Community Discussion
No community discussion yet for this question.