A global news website experiences massive spikes in traffic during major events. They want to serve static content with the lowest possible latency and protect their backend from L7 DDoS attacks while reducing the load on their ALB. Which combination of services should they use?

Direct Answer (Verified)Reviewed by Sunny (Senior Cloud Engineer)

Correct Answer: Amazon CloudFront with AWS WAF and AWS Shield

CloudFront caches content at edge locations for low latency. AWS WAF provides L7 protection, and Shield (especially Shield Advanced) protects against DDoS at layers 3, 4, and 7....

📋Part of AWS Certified Solutions Architect – Professional (SAP-C02) · AWS Certification Practice
Real Exam ScenarioAmazon CloudFront

A global news website experiences massive spikes in traffic during major events. They want to serve static content with the lowest possible latency and protect their backend from L7 DDoS attacks while reducing the load on their ALB. Which combination of services should they use?

✓ Correct Answer & ExplanationAmazon CloudFront

Correct Answer

Amazon CloudFront with AWS WAF and AWS Shield

Why This Answer Is Correct

CloudFront caches content at edge locations for low latency. AWS WAF provides L7 protection, and Shield (especially Shield Advanced) protects against DDoS at layers 3, 4, and 7.

📚 What This Question Tests

This question evaluates your knowledge of Amazon CloudFront — a core concept tested in AWS Certified Solutions Architect – Professional (SAP-C02). Understanding Amazon CloudFront is essential for designing scalable, secure, and cost-effective cloud architectures. Mastery of this topic will help you answer scenario-based questions confidently on exam day.