SCS-C02 · Question #59
A company is using Amazon Macie, AWS Firewall Manager, Amazon Inspector, and AWS Shield Advanced in its AWS account. The company wants to receive alerts if a DDoS attack occurs against the account…
The correct answer is D. Create an Amazon CloudWatch alarm that monitors Shield Advanced metrics for an active DDoS. AWS Shield Advanced is specifically made to prevent DDoS attacks. AWS Firewall Manager is used to manage firewall roles, got nothing to do with the DDoS. https://docs.aws.amazon.com/waf/latest/developerguide/ddos-cloudwatch-metrics.html
Question
A company is using Amazon Macie, AWS Firewall Manager, Amazon Inspector, and AWS Shield Advanced in its AWS account. The company wants to receive alerts if a DDoS attack occurs against the account. Which solution will meet this requirement?
Options
- AUse Macie to detect an active DDoS event. Create Amazon CloudWatch alarms that respond to
- BUse Amazon Inspector to review resources and to invoke Amazon CloudWatch alarms for any
- CCreate an Amazon CloudWatch alarm that monitors Firewall Manager metrics for an active DDoS
- DCreate an Amazon CloudWatch alarm that monitors Shield Advanced metrics for an active DDoS
How the community answered
(27 responses)- A4% (1)
- B4% (1)
- C15% (4)
- D78% (21)
Explanation
AWS Shield Advanced is specifically made to prevent DDoS attacks. AWS Firewall Manager is used to manage firewall roles, got nothing to do with the DDoS. https://docs.aws.amazon.com/waf/latest/developerguide/ddos-cloudwatch-metrics.html
Topics
Community Discussion
No community discussion yet for this question.