Topic 1 Question 104

AWS Certified Solutions Architect - Associate

Topic 1 Question 104
A solutions architect must design a highly available infrastructure for a website. The website is powered by Windows web servers that run on Amazon EC2 instances. The solutions architect must implement a solution that can mitigate a large-scale DDoS attack that originates from thousands of IP addresses. Downtime is not acceptable for the website. Which actions should the solutions architect take to protect the website from such an attack?

2 つ選択
- Use AWS Shield Advanced to stop the DDoS attack.
- Configure Amazon GuardDuty to automatically block the attackers.
- Configure the website to use Amazon CloudFront for both static and dynamic content.
- Use an AWS Lambda function to automatically add attacker IP addresses to VPC network ACLs.
- Use EC2 Spot Instances in an Auto Scaling group with a target tracking scaling policy that is set to 80% CPU utilization.
ユーザの投票
コメント(17)
- 正解だと思う選択肢: AC
  I think it is AC, reason is they require a solution that is highly available. AWS Shield can handle the DDoS attacks. To make the solution HA you can use cloud front. AC seems to be the best answer imo. AB seem like redundant answers. How do those answers make the solution HA?
  
  👍 19
  alvarez1002022/10/16
- 正解だと思う選択肢: AC
  Option A. Use AWS Shield Advanced to stop the DDoS attack.
  
  It provides always-on protection for Amazon EC2 instances, Elastic Load Balancers, and Amazon Route 53 resources. By using AWS Shield Advanced, the solutions architect can help protect the website from large-scale DDoS attacks.
  
  Option C. Configure the website to use Amazon CloudFront for both static and dynamic content.
  
  CloudFront is a content delivery network (CDN) that integrates with other Amazon Web Services products, such as Amazon S3 and Amazon EC2, to deliver content to users with low latency and high data transfer speeds. By using CloudFront, the solutions architect can distribute the website's content across multiple edge locations, which can help absorb the impact of a DDoS attack and reduce the risk of downtime for the website.
  
  👍 6
  Buruguduystunstugudunstuy2022/12/27
- 正解だと思う選択肢: AC
  AWS Shield can handle the DDoS attacks Amazon CloudFront supports DDoS protection, integration with Shield, AWS Web Application Firewall
  
  👍 3
  rjam2022/11/15
シャッフルモード

ユーザの投票

コメント(17)