Answer: AWS Shield Advanced

## Explanation **Correct Answer: D - AWS Shield Advanced** **Why AWS Shield Advanced is correct:** 1. **AWS DDoS Response Team (DRT) Access:** AWS Shield Advanced provides 24/7 access to the AWS DDoS Response Team (DRT) for help with DDoS mitigation during attacks. 2. **Support Plan Integration:** While AWS Business Support provides general technical support, access to the DRT specifically requires AWS Shield Advanced, which is a premium DDoS protection service. 3. **Comprehensive DDoS Protection:** AWS Shield Advanced offers enhanced DDoS protection beyond the basic AWS Shield Standard, including: - Real-time visibility and attack diagnostics - Advanced attack mitigation - Cost protection for scaling during DDoS attacks - Integration with AWS WAF for application layer protection **Why other options are incorrect:** - **A. AWS Shield Standard:** This is the basic DDoS protection that comes automatically with all AWS services at no extra cost, but it does NOT provide access to the DDoS Response Team. - **B. AWS Enterprise Support:** While Enterprise Support provides the highest level of technical support, access to the DDoS Response Team specifically requires AWS Shield Advanced, not just a support plan. - **C. AWS WAF:** AWS Web Application Firewall helps protect web applications from common web exploits, but it does not provide access to the DDoS Response Team for DDoS mitigation. **Key Takeaway:** To gain access to the AWS DDoS Response Team for DDoS mitigation assistance, a company must subscribe to AWS Shield Advanced, regardless of their AWS Support plan level.

Author: Ritesh Yadav