AWS Certified Security – Specialty — Question 244

A company is undergoing a layer 3 and layer 4 DDoS attack on its web servers running on AWS.
Which combination of AWS services and features will provide protection in this scenario? (Choose three.)

Answer options

• A. Amazon Route 53
• B. AWS Certificate Manager (ACM)
• C. Amazon S3
• D. AWS Shield
• E. Elastic Load Balancer
• F. Amazon GuardDuty

Correct answer: A, D, E

Explanation

The correct answer includes Amazon Route 53 for DNS management and traffic routing, AWS Shield for DDoS protection, and Elastic Load Balancer for distributing incoming traffic across multiple targets to ensure availability. AWS Certificate Manager (ACM) and Amazon S3 do not directly address DDoS mitigation, and Amazon GuardDuty is primarily for threat detection rather than direct protection against DDoS attacks.