AWS Certified Cloud Practitioner — Question 935

Which AWS service helps protect against DDoS attacks?

Answer options

• A. AWS Shield
• B. Amazon Inspector
• C. Amazon GuardDuty
• D. Amazon Detective

Correct answer: A

Explanation

AWS Shield is a managed Distributed Denial of Service (DDoS) protection service that safeguards applications running on AWS. Amazon Inspector is used for automated vulnerability assessment, Amazon GuardDuty provides continuous threat detection, and Amazon Detective simplifies security investigations, making them incorrect for active DDoS mitigation.