ExamGecko
Question list
Search
Search

List of questions

Search

Related questions











Question 104 - SAA-C03 discussion

Report
Export

A solutions architect must design a highly available infrastructure for a website. The website is powered by Windows web servers that run on Amazon EC2 instances. The solutions architect must implement a solution that can mitigate a large-scale DDoS attack that originates from thousands of IP addresses. Downtime is not acceptable for the website. Which actions should the solutions architect take to protect the website from such an attack? (Select TWO.)

A.
Use AWS Shield Advanced to stop the DDoS attack.
Answers
A.
Use AWS Shield Advanced to stop the DDoS attack.
B.
Configure Amazon GuardDuty to automatically block the attackers.
Answers
B.
Configure Amazon GuardDuty to automatically block the attackers.
C.
Configure the website to use Amazon CloudFront for both static and dynamic content.
Answers
C.
Configure the website to use Amazon CloudFront for both static and dynamic content.
D.
Use an AWS Lambda function to automatically add attacker IP addresses to VPC network ACLs.
Answers
D.
Use an AWS Lambda function to automatically add attacker IP addresses to VPC network ACLs.
E.
Use EC2 Spot Instances in an Auto Scaling group with a target tracking scaling policy that is set to 80% CPU utilization
Answers
E.
Use EC2 Spot Instances in an Auto Scaling group with a target tracking scaling policy that is set to 80% CPU utilization
Suggested answer: A, C

Explanation:

https://aws.amazon.com/cloudfron

asked 16/09/2024
lakshmi govindu
43 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first