Home › AWS SysOps Associate › cloudcomputing › sysopssecuritynetwork › Which AWS feature provides DDoS protection at L3…
Which AWS feature provides DDoS protection at L3/L4 for all AWS customers by default, with an advanced paid tier for L7 application-layer DDoS?
AAWS Direct Connect
BAmazon CloudFront only (no DDoS protection)
CAWS Snowball
DAWS Shield (Standard free; Advanced paid)
Answer & Solution
Correct answer: D. AWS Shield (Standard free; Advanced paid)
AWS Shield Standard is included free for L3/L4 DDoS protection; Shield Advanced adds L7 protection + DDoS Response Team access. The other services don't provide DDoS mitigation.
Related questions
Which managed AWS service centralises and accelerates cross-Region private traffic betweenWhich Route 53 feature distributes requests to multiple endpoints proportionally based on An application backed by an ALB receives an unusually high number of 4xx errors from a fewWhich AWS service allows centrally rotating keys, audit-logging key usage, and enforcing kAn EC2 instance in a private subnet needs outbound HTTPS to api.example.com but no inboundWhich AWS service tests an IAM policy against a hypothetical request and explains which stWhich managed service lets you privately connect a VPC to an AWS service (e.g. S3, DynamoDWhich networking object inside a VPC is STATELESS (return traffic doesn't auto-allow) and