Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
AWS Certified Solutions Architect - Associate · AWS
Select 2 answers.
This question asks for 2 answers, but our data marks only 1. Compare with the community discussion below for the full answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
AWS Shield protects against Layer 3 and 4 attacks through NLB and AWS WAF protects against Layer 7 attacks through API Gateway.
I did not get this right initially, but when I looked it up, it became clear. Basically any device that acts at network level - Shield (Layer 4 devices, maybe capable of layer 7 as well). For example, NLB, ELB, CF, Route 53. Any device that works on HTTP/HTTPS/SFTP level(Layer 7 services) ==> WAF , which is ALB, API Gateway. a Layer 7 device are not capable of layer 4 sevices, and they rely on underlying hardware/firmware(OR in this case of Software defined networking, Software) to do that.
Definitely a very good question, to be noted for the exam.