SAA-C03 Q44 · Security

Question

A company hosts a video streaming web application in a VPC. The company uses a Network Load Balancer (NLB) to handle TCP traic for realtime data processing. There have been unauthorized attempts to access the application. The company wants to improve application security with minimal architectural change to prevent unauthorized attempts to access the application. Which solution will meet these requirements?

Accepted Answer

**Wait — this question's official answer of D is actually debatable and potentially incorrect.** Let me explain both the official reasoning and the community discussion:

**Official reasoning for D (AWS Shield Advanced):**
- AWS Shield Advanced provides enhanced DDoS protection for resources including NLBs
- It offers 24/7 access to the AWS DDoS Response Team (DRT)
- It provides advanced attack mitigation capabilities
- Requires no architectural changes — you simply enable it on the NLB

**However, the stronger answer is likely B:**
As of August 2023, NLBs support security groups. This means you can:
1. Attach a security group directly to the NLB
2. Restrict inbound traffic to only trusted IP addresses
3. This is a minimal change — just adding a security group to the existing NLB
4. This d

📖 Explanation

✅ Correct Answer

❌ Wrong Answers

📘 Key Concepts

🏗️ Architecture

⚙️ Operations

💰 Cost

🔒 Security

🎯 Exam Tips