SAA-C03 Q592 · Security

Question

A retail company runs its application on AWS. The application uses Amazon EC2 for web servers, Amazon RDS for database services, and Amazon CloudFront for global content distribution. The company needs a solution to mitigate DDoS attacks. Which solution will meet this requirement?

Accepted Answer

**Answer B: Enable AWS Shield Advanced and configure CloudFront to work with Shield Advanced.**

1. **Requirement: Mitigate DDoS attacks** — The question explicitly asks for DDoS mitigation. AWS Shield is the **purpose-built DDoS protection service** on AWS.

2. **AWS Shield Advanced** provides:
   - Automatic detection and inline mitigation of sophisticated DDoS attacks (Layer 3, 4, and 7)
   - 24/7 access to the **DDoS Response Team (DRT)** who can actively help during an attack
   - **Cost protection** — credits for scaling charges incurred during DDoS attacks
   - Advanced real-time metrics and diagnostics
   - Protection for **CloudFront, ALB, EC2, Elastic IP, Route 53, and Global Accelerator**

3. **CloudFront integration**: CloudFront already benefits from AWS Shield Standard (free,

📖 Explanation

✅ Correct Answer

❌ Wrong Answers

📘 Key Concepts

🏗️ Architecture

⚙️ Operations

💰 Cost

🔒 Security

🎯 Exam Tips