QuestionQ650

Content Domain 3: Cloud Technology and Services

A company's cloud environment includes Amazon EC2 instances and Application Load Balancers. The company wants to improve protections for its cloud resources against DDoS attacks. The company also wants to have real-time visibility into any DDoS attacks.

Which AWS service will meet these requirements?

  • A AWS Shield Standard
  • B AWS Firewall Manager
  • C AWS Shield Advanced
  • D Amazon GuardDuty
Explanation

AWS Shield Advanced provides enhanced DDoS protection along with real-time attack visibility, diagnostics, and reporting through CloudWatch metrics and the Shield console/API. Shield Standard offers baseline protection but no advanced reporting, while Firewall Manager and GuardDuty address firewall policy management and threat detection rather than DDoS-specific real-time visibility. Learn more: AWS Shield Advanced

Community Discussion

No comments yet. Be the first to start the discussion!