AWS Certified Cloud Practitioner — Question 608

Which AWS service provides protection against DDoS attacks for applications that run in the AWS Cloud?

Answer options

• A. Amazon VPC
• B. AWS Shield
• C. AWS Audit Manager
• D. AWS Config

Correct answer: B

Explanation

AWS Shield is a managed service that provides specialized protection against DDoS attacks for applications running on AWS. Amazon VPC is a networking service for isolating cloud resources, while AWS Audit Manager and AWS Config are compliance and configuration management tools that do not offer DDoS mitigation.