AWS Certified Cloud Practitioner · Free Practice Question Easy
Question 47
A Cloud practitioner wants to know if there are services which can protect from DDoS (Distributed Denial of Service) attacks directed at AWS services.
Which AWS service or tool will provide this protection?
-
A
Security group
-
B
Network access control list (ACL)
-
C
AWS Shield
-
D
Amazon GuardDuty
Reveal correct answer
Correct answer: C
Explanation
AWS Shield is a managed Distributed Denial of Service (DDoS) protection service that safeguards applications running on AWS. AWS Shield provides always-on detection and automatic inline mitigations that minimize application downtime and latency, so there is no need to engage AWS Support to benefit from DDoS protection.
There are two tiers of AWS Shield - Standard and Advanced.
CORRECT: "AWS Shield" is the correct answer (as explained above.)
INCORRECT: "Network access control list (ACL)" is incorrect. Network ACLs exist within a VPC, and act as a stateless firewall for network traffic in and out of your subnets.
INCORRECT: "Security group" is incorrect. A Security Group is a Stateful firewall which exists to prevent unwarranted access to any instances running within a VPC.
INCORRECT: Amazon GuardDuty" is incorrect. Amazon GuardDuty is an intelligent threat detection service which has nothing to do with Distributed Denial of Service (DDoS) protection.
References:
https://aws.amazon.com/shield/features/
Save time with our AWS cheat sheets:
Discussion
Think the marked answer is wrong, or have a better explanation? Share it below — comments appear after review.
