Answer-first summary for fast verification
Answer: Enroll in AWS Shield Advanced and protect the accelerator as a resource.
The correct answer is A: Enroll in AWS Shield Advanced and protect the accelerator as a resource. AWS Shield Advanced provides enhanced DDoS protection for AWS applications, including additional detection and mitigation against larger and more sophisticated attacks. By adding the standard accelerator in AWS Global Accelerator as a resource, you ensure comprehensive protection against DDoS attacks, as AWS Global Accelerator can help distribute traffic across multiple regions, enhancing availability and resiliency. This protection strategy is more efficient compared to applying web ACLs on individual EC2 instances.
Author: LeetQuiz Editorial Team
Ultimate access to all questions.
How can a solutions architect protect a self-managed DNS service on AWS, which includes EC2 instances across various regions and a standard accelerator in AWS Global Accelerator, against DDoS attacks?
A
Enroll in AWS Shield Advanced and protect the accelerator as a resource.
B
Enroll in AWS Shield Advanced and protect the EC2 instances as resources.
C
Implement an AWS WAF web ACL with a rate-based rule and associate it with the accelerator.
D
Implement an AWS WAF web ACL with a rate-based rule and associate it with the EC2 instances.
No comments yet.