Correct Answer: To filter malicious web requests (Layer 7) based on rules like IP sets or SQL injection patterns
WAF (Web Application Firewall) specializes in application-layer protection, while Shield handles infrastructure-level attacks....
Correct Answer
To filter malicious web requests (Layer 7) based on rules like IP sets or SQL injection patterns
Why This Answer Is Correct
WAF (Web Application Firewall) specializes in application-layer protection, while Shield handles infrastructure-level attacks.
This question evaluates your knowledge of AWS Shield — a core concept tested in AWS Certified Solutions Architect – Associate (SAA-C03). Understanding AWS Shield is essential for designing scalable, secure, and cost-effective cloud architectures. Mastery of this topic will help you answer scenario-based questions confidently on exam day.
Your public-facing web application is under a Distributed Denial of Service (DDoS) attack. You need a managed service to detect and mitigate these attacks automatically. What should you enable?
Which AWS service provides automatic protection against common Distributed Denial of Service (DDoS) attacks for all AWS customers at no additional cost?
A large enterprise needs protection against sophisticated Layer 7 DDoS attacks and requires 24/7 access to the AWS Shield Response Team (SRT). Which service should they subscribe to?
What is the 'DDoS Cost Protection' benefit provided by AWS Shield Advanced?
Which AWS resources can be protected by AWS Shield Advanced?