SAA-C03 Question 396

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• Chose A6

  Global Accelerator is what is exposed to the Internet = where DDoS attacks could land = what must be protected by Shield Advanced

• Chose B1

  So, the correct option is: B. Subscribe to AWS Shield Advanced. Add the EC2 instances as resources to protect. Here's why this option is the most appropriate: A. While you can add the accelerator as a resource to protect with AWS Shield Advanced, it's generally more effective to protect the individual resources (in this case, the EC2 instances) because AWS Shield Advanced will automatically protect resources associated with Global Accelerator

• 6

  Which EC2 instance? Global Accelerator works by providing anycast IP addresses for the underlying resource (our EC2 in this case) so every end user trying to reach the EC2 server HAS to go through the Global Accelerator which is why the Global Accelerator needs to be protected and not the EC2.