An application running by a SysOps Administrator is under repeated, large-scale distributed denial of service (DDoS) attacks. Each time an attack occurs, multiple customers reach out to the Support…

Question

Options

• AAWS Trusted Advisor
• BAWS Shield Advanced
• CAmazon Cognito
• DAmazon Inspector

• A
  8% (3)
• B
  75% (27)
• C
  14% (5)
• D
  3% (1)

Explanation

AWS Shield Advanced is purpose-built for exactly this scenario - it provides managed DDoS protection with 24/7 access to the AWS DDoS Response Team (DRT), real-time attack visibility, and automatic mitigations for large-scale attacks, directly addressing the repeated outages and round-the-clock support requirement.

Why the others are wrong:

• A. AWS Trusted Advisor - A cost/security/performance advisory tool that makes recommendations; it does not actively defend against attacks.
• C. Amazon Cognito - An identity and user authentication service; completely unrelated to network attack mitigation.
• D. Amazon Inspector - A vulnerability assessment service that scans EC2 instances and container images for security issues; it is proactive/scanning, not a real-time threat blocker.

Memory tip: Think of Shield as a literal shield that blocks incoming DDoS blows - "Advanced" means you get a dedicated 24/7 human response team standing behind it. If the question mentions DDoS + outages + round-the-clock support, Shield Advanced is always the answer over the basic (free) Shield Standard.

No community discussion yet for this question.