Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
AWS Certified Solutions Architect - Associate · AWS
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
To effectively detect and mitigate large-scale DDoS attacks on a public-facing web app behind an ELB, enable AWS Shield Advanced and assign it to the ELB.
Only AWS Shield Advanced can help against DDos attacks and since we are using a third-party DNS so we can't attach it to Route 53.
Enabling AWS Shield Advanced provides advanced protection against large-scale DDoS attacks. Assigning the ELB to AWS Shield Advanced ensures that traffic to the web application is monitored and protected with enhanced mitigation techniques. The solution also offers a direct response mechanism (via the AWS DDoS Response Team) for further assistance during attacks.