SCS-C02 Domain 4: Infrastructure Security

Which service should you use to mitigate DDoS?

Multiple choice — select one answer

Answer choices

  1. a. Ignore attack (not recommended for production workloads)
  2. b. AWS Shield and Route 53 routing policies
  3. c. AWS WAF managed rule groups
  4. d. EC2 Image Builder CIS benchmarks

Architectural breakdown & explanation

Shield Standard is automatic; Advanced adds RTM.

Correct answer(s): b. AWS Shield and Route 53 routing policies

Exam domain: Domain 4: Infrastructure Security (17% weight on the official guide).

Official documentation & study links

Practice this certification

This page is one question from the AWS Certified Security – Specialty bank. Run a full timed practice exam with domain-weighted random questions in your browser.