Explanation
AWS Shield Advanced is the correct answer because:
- 24/7 DDoS Response Team (DRT) Access: AWS Shield Advanced provides direct access to the AWS DDoS Response Team (DRT) 24/7, which is specifically mentioned as a requirement in the question
- Enhanced DDoS Protection: While AWS Shield Standard provides automatic DDoS protection at no additional cost, Shield Advanced offers enhanced protection with additional features
- Enterprise Support Requirement: The company has an AWS Enterprise Support plan, which is a prerequisite for using AWS Shield Advanced
- Comprehensive Protection: Shield Advanced provides advanced DDoS mitigation capabilities, real-time visibility, and cost protection for scaling during DDoS attacks
Why not the other options:
- AWS Shield Standard: Only provides basic DDoS protection and does not include 24/7 access to the DRT
- AWS Firewall Manager: A security management service for configuring and managing AWS WAF rules across accounts, but not specifically for DDoS protection with DRT access
- AWS WAF: A web application firewall that protects against common web exploits, but does not provide DDoS protection with 24/7 DRT access
The key requirement of 24/7 access to the DDoS Response Team makes AWS Shield Advanced the only suitable choice among the options provided.