SCS-C02 · Question #59
SCS-C02 Question #59: Real Exam Question with Answer & Explanation
The correct answer is D: Create an Amazon CloudWatch alarm that monitors Shield Advanced metrics for an active DDoS. AWS Shield Advanced is specifically made to prevent DDoS attacks. AWS Firewall Manager is used to manage firewall roles, got nothing to do with the DDoS. https://docs.aws.amazon.com/waf/latest/developerguide/ddos-cloudwatch-metrics.html
Question
A company is using Amazon Macie, AWS Firewall Manager, Amazon Inspector, and AWS Shield Advanced in its AWS account. The company wants to receive alerts if a DDoS attack occurs against the account. Which solution will meet this requirement?
Options
- AUse Macie to detect an active DDoS event. Create Amazon CloudWatch alarms that respond to
- BUse Amazon Inspector to review resources and to invoke Amazon CloudWatch alarms for any
- CCreate an Amazon CloudWatch alarm that monitors Firewall Manager metrics for an active DDoS
- DCreate an Amazon CloudWatch alarm that monitors Shield Advanced metrics for an active DDoS
Explanation
AWS Shield Advanced is specifically made to prevent DDoS attacks. AWS Firewall Manager is used to manage firewall roles, got nothing to do with the DDoS. https://docs.aws.amazon.com/waf/latest/developerguide/ddos-cloudwatch-metrics.html
Community Discussion
No community discussion yet for this question.