AWS Certified Cloud Practitioner / Question #1359 of 719

Question #1359

A company is using AWS WAF and has an AWS Business Support plan. They want to ensure they can contact the AWS DDoS Response Team (DRT) during a DDoS attack.

Which AWS service or resource must they additionally use to meet this requirement?

A

AWS Shield Standard

B

AWS Enterprise Support

C

AWS Firewall Manager

D

AWS Shield Advanced

Explanation

The correct answer is D. AWS Shield Advanced. Here's why:

- AWS Shield Advanced includes 24/7 access to the AWS DDoS Response Team (DRT) during an attack, along with advanced DDoS mitigation capabilities. This is a core feature of Shield Advanced, which is not available in Shield Standard.
- AWS Shield Standard (A) is automatically included with AWS services but does not provide DRT access.
- AWS Enterprise Support (B) offers premium support features but does not grant DRT access unless combined with Shield Advanced.
- AWS Firewall Manager (C) is a management tool for WAF rules and does not relate to DDoS response services.

Key Takeaway: To access the DRT during a DDoS attack, Shield Advanced is mandatory, regardless of the AWS Support plan tier.

Answer

The correct answer is: D