SAA-C03 Q533 · Security

Question

A company is building an application in the AWS Cloud. The application is hosted on Amazon EC2 instances behind an Application Load Balancer (ALB). The company uses Amazon Route 53 for the DNS. The company needs a managed solution with proactive engagement to detect against DDoS attacks. Which solution will meet these requirements?

Accepted Answer

**Answer D: Subscribe to AWS Shield Advanced** satisfies every requirement:

1. **Managed solution**: AWS Shield Advanced is a fully managed DDoS protection service. AWS handles detection, mitigation, and response — no custom rules or manual log analysis needed.

2. **Proactive engagement**: This is the critical keyword. Shield Advanced provides access to the **AWS Shield Response Team (SRT)**, and specifically offers **proactive engagement** where the SRT contacts you during detected DDoS events before you even notice them. This feature is unique to Shield Advanced.

3. **DDoS attack detection**: Shield Advanced provides advanced detection capabilities including real-time visibility into attacks, sophisticated attack detection using traffic baselining, and Layer 3/4/7 DDoS mitigation.

4.

📖 Explanation

✅ Correct Answer

❌ Wrong Answers

📘 Key Concepts

🏗️ Architecture

⚙️ Operations

💰 Cost

🔒 Security

🎯 Exam Tips