Your public-facing web application is under a Distributed Denial of Service (DDoS) attack. You need a managed service to detect and mitigate these attacks automatically. What should you enable?

Direct Answer (Verified)Reviewed by Sunny (Senior Cloud Engineer)

Correct Answer: AWS Shield

AWS Shield provides always-on detection and automatic inline mitigations to minimize application downtime and latency during a DDoS attack....

📋Part of AWS Certified Solutions Architect – Associate (SAA-C03) · AWS Certification Practice

Real Exam ScenarioAWS Shield

Your public-facing web application is under a Distributed Denial of Service (DDoS) attack. You need a managed service to detect and mitigate these attacks automatically. What should you enable?

✓ Correct Answer & ExplanationAWS Shield

Correct Answer

AWS Shield

Why This Answer Is Correct

AWS Shield provides always-on detection and automatic inline mitigations to minimize application downtime and latency during a DDoS attack.

📚 What This Question Tests

This question evaluates your knowledge of AWS Shield — a core concept tested in AWS Certified Solutions Architect – Associate (SAA-C03). Understanding AWS Shield is essential for designing scalable, secure, and cost-effective cloud architectures. Mastery of this topic will help you answer scenario-based questions confidently on exam day.

All AWS Certified Solutions Architect – Associate (SAA-C03) Questions →Browse All AWS Exams →

Your public-facing web application is under a Distributed Denial of Service (DDoS) attack. You need a managed service to detect and mitigate these attacks automatically. What should you enable?

Your public-facing web application is under a Distributed Denial of Service (DDoS) attack. You need a managed service to detect and mitigate these attacks automatically. What should you enable?

📚 What This Question Tests

More AWS Shield Practice Questions