Your public-facing web application is under a Distributed Denial of Service (DDoS) attack. You need a managed service to detect and mitigate these attacks automatically. What should you enable?

Direct Answer (Verified)Reviewed by Sunny (Senior Cloud Engineer)

Correct Answer: AWS Shield

AWS Shield provides always-on detection and automatic inline mitigations to minimize application downtime and latency during a DDoS attack....

📋Part of AWS Certified Advanced Networking – Specialty (ANS-C01) · AWS Certification Practice
Real Exam ScenarioAWS Shield

Your public-facing web application is under a Distributed Denial of Service (DDoS) attack. You need a managed service to detect and mitigate these attacks automatically. What should you enable?

✓ Correct Answer & ExplanationAWS Shield

Correct Answer

AWS Shield

Why This Answer Is Correct

AWS Shield provides always-on detection and automatic inline mitigations to minimize application downtime and latency during a DDoS attack.

📚 What This Question Tests

This question evaluates your knowledge of AWS Shield — a core concept tested in AWS Certified Advanced Networking – Specialty (ANS-C01). Understanding AWS Shield is essential for designing scalable, secure, and cost-effective cloud architectures. Mastery of this topic will help you answer scenario-based questions confidently on exam day.