A company uses Amazon Macie, AWS Firewall Manager, Amazon Inspector, and AWS Shield Advanced. The company wants to receive alerts when a DDoS attack occurs. Which solution meets this requirement?
Choose an answer
Tap an option to check your answer.
Correct answer: Create an Amazon CloudWatch alarm that monitors AWS Shield Advanced metrics for an active DDoS event..
Why this is the answer
AWS Shield Advanced is specifically designed for DDoS protection and provides detailed metrics for detected attacks. Integrating Shield Advanced with Amazon CloudWatch allows you to create alarms that trigger notifications when DDoS attack metrics (like DDoSDetected or DDoSAttackBitsPerSecond) exceed defined thresholds, ensuring timely alerts. Macie is for data discovery and classification, not DDoS detection. Inspector assesses vulnerabilities and deviations from best practices, not real-time DDoS attacks. Firewall Manager centrally manages WAF rules and security groups but doesn't inherently detect a DDoS attack itself; it relies on services like Shield Advanced or WAF to identify malicious traffic patterns.
Pass your exam — without the endless answer hunt
Get every verified question and explanation for this exam in one place, and save hours of prep. 1,000+ certifications · 20+ languages · free to start.
Pass your exam faster → No card needed