Exam AWS Certified Solutions Architect - Associate SAA-C03 topic 1 question 169 discussion

What's going on, suddenly the questions are so easy

When you see DDOS immediately think Shield

AWS Shield is most suitable for DDoS attacks.

Ans C - DDoS under AWS = Shield/ Shield Advanced

When you see DDOS immediately think Shield

AWS Shield is a managed DDoS protection service that safeguards applications running on AWS.

Enable AWS Shield Advanced to prevent attacks.

By enabling Shield Advanced, the web application benefits from automatic protection against common and sophisticated DDoS attacks. It utilizes advanced detection and mitigation techniques, including ML algorithms and traffic analysis, to provide effective DDoS protection. It also includes features like real-time monitoring, attack notifications, and detailed attack reports. A is not related to DDoS protection. Amazon Inspector is a security assessment service that helps identify vulnerabilities and security issues in applications and EC2. B is also not the appropriate solution. Macie is a service that uses machine learning to discover, classify, and protect sensitive data stored in AWS. It focuses on data security and protection, not specifically on DDoS prevention. D is not the most effective solution. GuardDuty is a threat detection service that analyzes events and network traffic to identify potential security threats and anomalies. While it can provide insights into potential DDoS attacks, it does not actively prevent or mitigate them.

Explained in details here https://medium.com/@tshemku/aws-waf-vs-firewall-manager-vs-shield-vs-shield-advanced-4c86911e94c6

To reduce the risk of DDoS attacks against the application, the solutions architect should enable AWS Shield Advanced (Option C). AWS Shield is a managed Distributed Denial of Service (DDoS) protection service that helps protect web applications running on AWS from DDoS attacks. AWS Shield Advanced is an additional layer of protection that provides enhanced DDoS protection capabilities, including proactive monitoring and automatic inline mitigations, to help protect against even the largest and most sophisticated DDoS attacks. By enabling AWS Shield Advanced, the solutions architect can help protect the application from DDoS attacks and reduce the risk of disruption to the application.

C is right answer

C is correct

AWS Shield Advanced

DDOS = AWS Shield