SAA-C03 Domain 1: Design Resilient Architectures

While troubleshooting latency, engineers determine they must protect against DDoS at the edge. Which action is appropriate? protect against DDoS at the edge.

Multiple choice — select one answer

Answer choices

  1. a. AWS Shield and AWS WAF with CloudFront
  2. b. Elastic Load Balancing
  3. c. Public SSH on port 22 (not recommended for production workloads)
  4. d. Amazon Route 53

Architectural breakdown & explanation

Shield and WAF mitigate network and application attacks.

Correct answer(s): a. AWS Shield and AWS WAF with CloudFront

Exam domain: Domain 1: Design Resilient Architectures (30% weight on the official guide).

Official documentation & study links

Practice this certification

This page is one question from the AWS Certified Solutions Architect – Associate bank. Run a full timed practice exam with domain-weighted random questions in your browser.