AWS Certified Security – Specialty (SCS-C02) — Question 160

A company is undergoing a layer 3 and layer 4 DDoS attack on its web servers running on AWS.

Which combination of AWS services and features will provide protection in this scenario? (Choose three.)

Answer options

• A. Amazon Route 53
• B. AWS Certificate Manager (ACM)
• C. Amazon S3
• D. AWS Shield
• E. Network Load Balancer
• F. Amazon GuardDuty

Correct answer: A, D, E

Explanation

Amazon Route 53 can help with DNS management to reroute traffic, AWS Shield provides DDoS protection, and a Network Load Balancer can distribute incoming traffic. The other options, while useful for different purposes, do not specifically address the mitigation of layer 3 and layer 4 DDoS attacks.