Which combination of solutions provides the MOST protection?
(Choose two.)
Use AWS WAF to protect the NLB.
Use AWS Shield Advanced with the NLB.
Use AWS WAF to protect Amazon API Gateway.
Use Amazon GuardDuty with AWS Shield Standard.
Use AWS Shield Standard with Amazon API Gateway.
Explanations:
AWS WAF cannot be directly associated with a Network Load Balancer (NLB). AWS WAF can only protect resources like Amazon CloudFront distributions or Amazon API Gateway.
AWS Shield Advanced provides enhanced DDoS protection specifically designed for more sophisticated and larger attacks. It is effective when used with the NLB to protect against such threats.
Using AWS WAF with Amazon API Gateway is an effective way to protect against web exploits like SQL injection and cross-site scripting (XSS). AWS WAF can filter incoming requests to API Gateway based on predefined rules.
While Amazon GuardDuty can provide threat detection, it does not directly mitigate DDoS attacks. AWS Shield Standard offers automatic DDoS protection, but it is not a combination with GuardDuty that fulfills the requirement.
AWS Shield Standard offers basic DDoS protection, but it does not provide the advanced features available with Shield Advanced. Additionally, Shield Standard does not directly protect Amazon API Gateway.
I surmise that the answer is:
Use AWS Shield Advanced with the NLB.
I categorize that the answer is:
Use AWS Shield Advanced with the NLB.