SCS-C02 Question #433: Real Exam Question with Answer & Explanation

Question

An ecommerce website was down for 1 hour following a DDoS attack. Users were unable to connect to the website during the attack period. The ecommerce company's security team is worried about future potential attacks and wants to prepare for such events. The company needs to minimize downtime in its response to similar attacks in the future. Which steps would help achieve this? (Choose two.)

Options

• AEnable Amazon GuardDuty to automatically monitor for malicious activity and block unauthorized
• BSubscribe to AWS Shield Advanced and reach out to AWS Support in the event of an attack.
• CUse VPC Flow Logs to monitor network traffic and an AWS Lambda function to automatically
• DSet up an Amazon EventBridge rule to monitor the AWS CloudTrail events in real time, use AWS
• EUse AWS WAF to create rules to respond to such attacks.

Explanation

Subscribe to AWS Shield Advanced and reach out to AWS Support in the event of an attack. AWS Shield Advanced provides enhanced protection against DDoS attacks. It includes access to the DDoS Response Team (DRT), who can help mitigate attacks quickly and minimize downtime. This service also includes advanced metrics and protections for critical resources, helping the company respond efficiently to attacks. Use AWS WAF to create rules to respond to such attacks. AWS WAF (Web Application Firewall) allows the company to create specific rules that can block malicious traffic, including traffic patterns typical of DDoS attacks. By using AWS WAF, the company can automate and respond to attacks by filtering traffic at the application level, reducing the chances of downtime during These solutions help the company reduce downtime by providing proactive protection (AWS WAF) and reactive expert support (AWS Shield Advanced).

No community discussion yet for this question.