Exam AWS Certified Solutions Architect - Associate SAA-C03 topic 1 question 927 discussion

For your references: 1. AWS WAF (Web Application Firewall) - SQL injections, cross-site scripting (XSS), and other common web exploits. 2. Shield Standard - common DDoS attacks; Shield Advanced - Provides advanced DDoS protection with 24/7 support, cost protection for scaling due to attacks, and more detailed attack analytics. 3. AWS Network Firewall - Blocks unauthorized access and inspect traffic for VPCs. 4. Amazon GuardDuty - Detects threats by analyzing AWS logs like CloudTrail, DNS, and VPC Flow Logs. Identifies potential malicious activities like brute force attacks and data exfiltration. 5. AWS Macie - Helps identify and protect sensitive data like PII stored in S3 buckets.

Shield Advanced signals a DDoS detection and starts analyzing the traffic for an attack signature. If a signature is found, it is first tested on past traffic to reduce the risk of false positive, then if it's safe to use it, a corresponding WAF rule is placed in the previously created rule group. After a certain time, when the attack is stopped, the rule is automatically removed from the rule group. When successful, this process takes several minutes.

Tip: DDoS = Shield, SQL injection = WAF

Answer is D

D for DDOS shield advance