Amazon
SOA-C03 · Question #123
A company that runs multiple workloads on AWS wants to enhance its security posture by implementing DNS-based threat protection. The company must block DNS-based attacks. Which solution will meet this
Sign in or unlock SOA-C03 to reveal the answer and full explanation for question #123. The question stem and answer options stay visible for context.
Submitted by joshua94· Mar 5, 2026Security and compliance
Question
A company that runs multiple workloads on AWS wants to enhance its security posture by implementing DNS-based threat protection. The company must block DNS-based attacks. Which solution will meet this requirement?
Options
- ADeploy AWS Shield Advanced to filter and block malicious DNS queries. Set up domain filtering
- BUse AWS WAF to inspect DNS traffic for malicious domains. Create custom rules to block known
- CConfigure Amazon Route 53 Resolver to forward DNS queries to Route 53 Resolver DNS
- DConfigure AWS Config to monitor DNS queries and DNS traffic patterns. Use an AWS Lambda
Unlock SOA-C03 to see the answer
You've previewed enough free SOA-C03 questions. Unlock SOA-C03 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.
Topics
#Route 53 Resolver#DNS Firewall#threat protection#DNS security