nerdexam
Amazon

SCS-C02 · Question #5

A company is using Amazon Macie, AWS Firewall Manager, Amazon Inspector, and AWS Shield Advanced in its AWS account. The company wants to receive alerts if a DDoS attack occurs against the account. Wh

The correct answer is D. Create an Amazon CloudWatch alarm that monitors Shield Advanced metrics for an active DDoS. https://docs.aws.amazon.com/waf/latest/developerguide/ddos-cloudwatch-metrics.html

Submitted by dimitri_ru· Mar 6, 2026Implement authentication and access management

Question

A company is using Amazon Macie, AWS Firewall Manager, Amazon Inspector, and AWS Shield Advanced in its AWS account. The company wants to receive alerts if a DDoS attack occurs against the account. Which solution will meet this requirement?

Options

  • AUse Macie to detect an active DDoS event. Create Amazon CloudWatch alarms that respond to
  • BUse Amazon inspector to review resources and to invoke Amazon CloudWatch alarms for any
  • CCreate an Amazon CloudWatch alarm that monitors Firewall Manager metrics for an active DDoS
  • DCreate an Amazon CloudWatch alarm that monitors Shield Advanced metrics for an active DDoS

How the community answered

(66 responses)
  • A
    5% (3)
  • B
    2% (1)
  • C
    11% (7)
  • D
    83% (55)

Explanation

https://docs.aws.amazon.com/waf/latest/developerguide/ddos-cloudwatch-metrics.html

Topics

#AWS Shield Advanced#DDoS detection#CloudWatch alarms#security monitoring

Community Discussion

No community discussion yet for this question.

Full SCS-C02 Practice