Which solution meets these requirements?

By:
In: SAA-C02
Tagged:
With: 2 Comments
A company is preparing to launch a public-facing web application in the AWS Cloud.The architecture consists of Amazon EC2 instances within a VPC behind anElastic Load Balancer (ELB).A third party service is used for the DNS.The company’s solutions architect must recommend a solution to detect and protect against largescale DDoS attacks.

Which solution meets these requirements?

Enable Amazon GuardDuty on the account.

Enable Amazon Inspector on the EC2 instances.

Enable AWS Shield and assign Amazon Route 53 to it.

Enable AWS Shield Advanced and assign the ELB to it.

Explanations:

Amazon GuardDuty is a threat detection service for monitoring suspicious activity and potential security threats, but it does not specifically protect against DDoS attacks.

Amazon Inspector is a security assessment service for EC2 instances, primarily focused on finding vulnerabilities and misconfigurations, not DDoS protection.

AWS Shield provides DDoS protection, but only Shield Advanced (not the basic version) offers protection for ELBs, and Route 53 is not a direct factor in this solution.

AWS Shield Advanced provides enhanced DDoS protection for resources like ELB. It includes proactive detection, mitigation, and detailed attack diagnostics.

2026-04-06

2 Comments

  1. Natalie
    Author

    I arrange that the answer is:
    Enable AWS Shield Advanced and assign the ELB to it.

  2. Gabriel
    Author

    If memory serves me right, the answer is:
    Enable AWS Shield Advanced and assign the ELB to it.

Leave a Reply

Your email address will not be published. Required fields are marked *

14 − 1 =