Which solution meets these requirements?

By:
In: SAA-C03
Tagged:
With: 1 Comment
A company is preparing to launch a public-facing web application in the AWS Cloud.The architecture consists of Amazon EC2 instances within a VPC behind an Elastic Load Balancer (ELB).A third-party service is used for the DNS.The company’s solutions architect must recommend a solution to detect and protect against large-scale DDoS attacks.

Which solution meets these requirements?

Enable Amazon GuardDuty on the account.

Enable Amazon Inspector on the EC2 instances.

Enable AWS Shield and assign Amazon Route 53 to it.

Enable AWS Shield Advanced and assign the ELB to it.

Explanations:

Amazon GuardDuty is a threat detection service that monitors for malicious activity but does not specifically protect against DDoS attacks.

Amazon Inspector is a security assessment service for EC2 instances to improve security posture but does not provide DDoS protection.

While AWS Shield provides DDoS protection, assigning Amazon Route 53 (a DNS service) to it does not adequately protect the application behind the ELB.

AWS Shield Advanced provides enhanced DDoS protection specifically for applications, and assigning it to the Elastic Load Balancer directly protects the app.

2025-10-12

1 Comment

  1. Elijah
    Author

    As far as I can tell, the answer is:
    Enable AWS Shield Advanced and assign the ELB to it.

Leave a Reply to Elijah Cancel reply

Your email address will not be published. Required fields are marked *

one × two =