Practice Test 4 | AWS Certified Cloud Practitioner | CLF-C01 | Dumps | Mock Test
An organization is planning to implement protection for its applications on EC2, ELB and Route 53 resources. So it can obtain near real-time visibility into the attacks and prevent sophisticated DDoS attacks.
Which AWS Service would you suggest?
A. AWS Shield Standard
B. AWS Shield Advanced
C. AWS Firewall Manager
D. AWS WAF (Web Application Firewall)
Answer: B
- Option A is INCORRECT. AWS Shield Standard helps prevent DDoS attacks that occur commonly and target websites/applications on the transport and network layer. When used in conjunction with Route 53 and Cloudfront, protection is assured against all known layer 3 and layer 4 attacks. AWS Shield Standard is free.
- Option B is CORRECT. AWS Shield Advanced protects applications on EC2, ELB, Cloudfront, global accelerator and Route 53 resources. So near real-time visibility into the attacks could be obtained and sophisticated DDoS attacks could be prevented.
- Option C is INCORRECT. AWS Firewall Manager helps convenient implementation of compliance and simplifies the firewall rules management across AWS accounts.
- Option D is INCORRECT. AWS WAF (Web Application Firewall) offers prevention for APIs and Web Applications from unavailability, security compromise, increased resources consumption.
Reference:
Comments are closed, but trackbacks and pingbacks are open.