SAA-C03 Q552 · Security

Question

A company wants to protect resources that the company hosts on AWS, including Application Load Balancers and Amazon CloudFront distributions. The company wants an AWS service that can provide near real-time visibility into attacks on the company's resources. The service must also have a dedicated AWS team to assist with DDoS attacks. Which AWS service will meet these requirements?

Accepted Answer

**AWS Shield Advanced (Option D)** meets every requirement stated in the question:

1. **Protects ALBs and CloudFront distributions**: Shield Advanced supports protection for Amazon CloudFront, Application Load Balancers, Elastic IPs, Amazon Route 53 hosted zones, and AWS Global Accelerator accelerators.

2. **Near real-time visibility into attacks**: Shield Advanced provides **advanced real-time metrics and reports** through the AWS Shield console, including attack diagnostics, detailed event summaries, and integration with Amazon CloudWatch for near real-time monitoring of DDoS events.

3. **Dedicated AWS team for DDoS assistance**: Shield Advanced includes access to the **AWS Shield Response Team (SRT)** — a dedicated team of DDoS experts who can assist 24/7 during active attacks. The S

📖 Explanation

✅ Correct Answer

❌ Wrong Answers

📘 Key Concepts

🏗️ Architecture

⚙️ Operations

💰 Cost

🔒 Security

🎯 Exam Tips