Correct Answer: All of these (CloudFront, Route 53, Elastic Load Balancing, Global Accelerator)
AWS Shield Advanced offers robust DDoS protection that can be enabled on public-facing AWS resources, including Amazon CloudFront distributions, Amazon Route 53 zones, ELB load bal...
Correct Answer
All of these (CloudFront, Route 53, Elastic Load Balancing, Global Accelerator)
Why This Answer Is Correct
AWS Shield Advanced offers robust DDoS protection that can be enabled on public-facing AWS resources, including Amazon CloudFront distributions, Amazon Route 53 zones, ELB load balancers, and Global Accelerator.
This question evaluates your knowledge of AWS Shield — a core concept tested in AWS Certified Cloud Practitioner (CLF-C02). Understanding AWS Shield is essential for designing scalable, secure, and cost-effective cloud architectures. Mastery of this topic will help you answer scenario-based questions confidently on exam day.
Your public-facing web application is under a Distributed Denial of Service (DDoS) attack. You need a managed service to detect and mitigate these attacks automatically. What should you enable?
Which AWS service provides automatic protection against the most common Infrastructure Layer (Layer 3 and 4) DDoS attacks at no additional cost?
What is the primary benefit of upgrading to AWS Shield Advanced?
What is the 'Shield Response Team' (SRT)?
Does AWS Shield Standard provide protection against Application Layer (Layer 7) attacks like SQL injection?