AWS Certified Cloud Practitioner — Question 938

Which AWS service will help protect applications running on AWS from DDoS attacks?

Answer options

• A. Amazon GuardDuty
• B. AWS WAF
• C. AWS Shield
• D. Amazon Inspector

Correct answer: C

Explanation

AWS Shield is a dedicated service that provides managed DDoS protection for applications running on AWS. While AWS WAF helps protect against common web exploits and Amazon GuardDuty monitors for malicious activity, AWS Shield specifically defends against denial of service attacks. Amazon Inspector is a vulnerability management service and does not provide DDoS protection.