Shield

Question 1

Which managed service offers protection against distributed denial of service (DDoS) attacks for applications on AWS?

Answer 1

AWS Shield

Question 2

Which AWS Shield option is free of charge for AWS customers?

Answer 2

AWS Shield Standard

Question 3

What types of attacks does AWS Shield protect against?

Answer 3

• Network volumetric attacks (Layer 3): capacity saturation
• Network protocol attacks (Layer 4): TCP SYN flood
• Application layer attacks (Layer 7): web request floods

Question 4

What are the two options of AWS Shield?

Answer 4

• Shield Standard – free for all AWS customers
• Shield Advanced – paid option with additional features

Question 5

Which AWS Shield option provides protection at the network perimeter (region for VPC) and at the edge (CloudFront or Global Accelerator)?

Answer 5

AWS Shield Standard

Question 6

Which AWS Shield option defends against network (L3) and transport (L4) layer attacks?

Answer 6

AWS Shield Standard

Question 7

Which AWS Shield option is a commercial product with extra features and additional cost?

Answer 7

AWS Shield Advanced

Question 8

Is AWS Shield Advanced enabled automatically?

Answer 8

No, must be explicitly enabled in Shield Advanced or AWS Firewall Manager Shield Advanced Policy

Question 9

Which AWS Shield option protects Route 53, CloudFront, Global Accelerator, and resources associated with Elastic IPs, ALBs, NLBs, and CLBs?

Answer 9

AWS Shield Advanced

Question 10

Which AWS Shield option provides cost protection for EC2 scaling events caused by unmitigated attacks?

Answer 10

AWS Shield Advanced

Question 11

Which AWS Shield option provides proactive engagement and access to the Shield Response Team (SRT) when availability or performance is affected by an attack?

Answer 11

AWS Shield Advanced

Question 12

Which AWS Shield option provides health-based detection (application-specific health checks) to enable proactive engagement by the Shield Response Team?

Answer 12

AWS Shield Advanced

Question 13

Which AWS Shield option provides health-based detection (requires application-specific health checks) to enable proactive engagement by the Shield Response Team?

Answer 13

AWS Shield Advanced

Question 14

Which AWS Shield option integrates with AWS Web Application Firewall (WAF) to provide application-layer (L7) protection?

Answer 14

AWS Shield Advanced

Question 15

Which AWS Shield option provides real-time metrics and reports of DDoS events and attacks?

Answer 15

AWS Shield Advanced

Question 16

What AWS Shield Advanced feature allows creating logical collections of protected resources and managing them together?

Answer 16

Protection groups

Question 17

What is the pricing model for AWS Shield Advanced?

Answer 17

• $3,000 per month per organization (minimum 12-month commitment)
• Data-transfer-out/month usage fees