Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
AWS Certified Solutions Architect - Associate · AWS
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
A. Amazon Inspector = Software vulnerabilities like OS patches etc. Not fit for purpose. C. Changing IP from DDoS so don't know the incoming traffic for configuration (even if it was possible) D. GardDuty is for workload and AWS account monitoring so it can't help with DDoS. B is correct as AWS WAF + ALB can configure rate limiting even if source IP changes.
Best solution Shield Advanced, not listed here, thus second-best solution, WAF with rate limiting
according to some google searches... to protect against DDOS attack: * AWS WAF(Web Application Firewall) provides protection on the application layer (I think Application Load Balancer belongs to this level) * AWS Shield protects the infrastructure layers of the OSI mode (I think AWS Network Load Balancer belongs to this level)