Examkin

Question

Difficulty: EasyEdge and DDoS Protection

A logistics firm hosts its web portal on AWS. The firm requires advanced DDoS protection, direct access to the AWS Shield Response Team (SRT) during an active event, and financial protection to mitigate scaling costs associated with a DDoS attack. Which AWS service should the solutions architect recommend to meet these requirements?

  1. AWS Shield AdvancedAnswer
  2. B
    AWS Shield Standard
  3. C
    AWS WAF
  4. D
    Amazon VPC Security Groups

Answer

AWS Shield Advanced
The correct answer is AWS Shield Advanced. This subscription-based service provides enhanced DDoS protection for resource types such as Elastic IP, CloudFront, Route 53, and Elastic Load Balancing. It features 24/7 access to the AWS Shield Response Team (SRT) and provides cost protection to mitigate billing spikes resulting from DDoS attacks.

Step-by-Step Solution

1
Analyze the requirements: advanced DDoS protection, specialized team support (SRT), and billing protection for scaling costs.
Identify that the requirements point to a paid tier of AWS DDoS protection.
Standard services or firewalls do not include human support or financial guarantees.
2
Compare Shield tiers and related security services.
Confirm Shield Advanced covers all three criteria.
AWS Shield Advanced is specifically designed to provide cost protection and SRT support.

Key Concept

AWS Shield Advanced Features
Rate this question

Topics

Edge and DDoS Protection

More questions from this topic