ANS-C01 Domain 4: Network Security, Compliance, and Governance

Operations reports a need to mitigate DDoS on public endpoints. What is the MOST operationally efficient solution? mitigate DDoS on public endpoints.

Multiple choice — select one answer

Answer choices

  1. a. Shield Advanced with WAF and RTM
  2. b. AWS WAF with Bot Control
  3. c. Network Firewall domain list rules
  4. d. API Gateway mutual TLS or ALB trust stores

Architectural breakdown & explanation

Shield Advanced provides DDoS response team.

Correct answer(s): a. Shield Advanced with WAF and RTM

Exam domain: Domain 4: Network Security, Compliance, and Governance (24% weight on the official guide).

Official documentation & study links

Practice this certification

This page is one question from the AWS Certified Advanced Networking – Specialty bank. Run a full timed practice exam with domain-weighted random questions in your browser.