A company runs Amazon EC2 instances and Application Load Balancers and wants stronger DDoS protections plus near real-time visibility into attacks. Which AWS service fulfills these needs?
Choose an answer
Tap an option to check your answer.
Correct answer: AWS Shield Advanced.
Why this is the answer
AWS Shield Advanced provides enhanced DDoS protection for applications running on AWS, including EC2 instances and Application Load Balancers. It offers near real-time visibility into attacks through detailed metrics and reports, and provides 24/7 access to the AWS DDoS Response Team (DRT) for expert support during events. AWS Shield Standard is automatically included for all AWS customers but offers only basic protection and lacks the advanced visibility and DRT access. AWS Firewall Manager helps centrally configure and manage firewall rules across accounts and applications, but it's not a primary DDoS protection service. Amazon GuardDuty is a threat detection service that monitors for malicious activity and unauthorized behavior, not a dedicated DDoS mitigation service.
Pass your exam — without the endless answer hunt
Get every verified question and explanation for this exam in one place, and save hours of prep. 1,000+ certifications · 20+ languages · free to start.
Pass your exam faster → No card needed