Home › AWS Solutions Architect Professional › cloudcomputing › sapimprovement › Which AWS service provides edge-DDoS protection …
Which AWS service provides edge-DDoS protection at L3/L4 + L7 with always-on detection — included free at standard tier across AWS-managed edge services?
AAWS Snowball
BAWS Shield (Standard / Advanced)
CAmazon RDS
DAWS Direct Connect
Answer & Solution
Correct answer: B. AWS Shield (Standard / Advanced)
AWS Shield is the DDoS-protection service (per SAP-C02 §2.3, §3.2). The others aren't DDoS controls.
Related questions
Which AWS Auto Scaling feature predicts traffic ahead of time using ML and scales capacityAn architect must improve reliability of a multi-AZ workload that has a single-AZ Amazon RWhich AWS feature lets an architect detect unused or idle resources (e.g. detached EBS volWhich Amazon CloudFront feature lets an architect execute lightweight JavaScript at the edWhich AWS pattern adds an in-memory cache layer to reduce read pressure on Amazon RDS / AuWhich AWS service automatically discovers and classifies sensitive data (PII, PHI, credentWhich AWS service continuously scans EC2 instances and container images for software vulneWhich AWS service automates OS-patch management, run-command execution, parameter storage,