AWS Shield for DDoS protection - Cheat Sheet & Quick Revision

Recall & Review

beginner

What is AWS Shield?

AWS Shield is a managed service that protects applications running on AWS from Distributed Denial of Service (DDoS) attacks.

beginner

What are the two tiers of AWS Shield?

AWS Shield has two tiers: Standard, which provides automatic protection for all AWS customers at no extra cost, and Advanced, which offers additional detection and mitigation for complex attacks with 24/7 support.

beginner

How does AWS Shield Standard protect your resources?

AWS Shield Standard automatically protects AWS resources like Amazon CloudFront and Elastic Load Balancing from common, frequently occurring network and transport layer DDoS attacks without any user action.

intermediate

What additional benefits does AWS Shield Advanced provide over Standard?

AWS Shield Advanced offers enhanced detection and mitigation, near real-time visibility into attacks, integration with AWS WAF, cost protection against scaling charges during attacks, and 24/7 access to the AWS DDoS Response Team.

beginner

Why is AWS Shield important for cloud applications?

AWS Shield helps keep cloud applications available and responsive by protecting them from DDoS attacks that can overwhelm resources and cause downtime or slow performance.

Which AWS Shield tier is automatically enabled for all AWS customers at no extra cost?

A Premium

B Advanced

C Enterprise

D Standard

AWS Shield Standard is automatically enabled for all AWS customers and provides basic DDoS protection at no additional cost.

What type of attacks does AWS Shield primarily protect against?

A Distributed Denial of Service (DDoS) attacks

B Phishing attacks

C Malware infections

D SQL injection attacks

AWS Shield is designed to protect against Distributed Denial of Service (DDoS) attacks that aim to overwhelm resources.

Which AWS Shield tier provides 24/7 access to the AWS DDoS Response Team?

A Advanced

B Standard

C Basic

D Developer

AWS Shield Advanced includes 24/7 access to the AWS DDoS Response Team for expert help during attacks.

AWS Shield Advanced integrates with which AWS service to provide customizable web traffic filtering?

A Amazon S3

B AWS Lambda

C AWS WAF

D Amazon EC2

AWS Shield Advanced integrates with AWS WAF (Web Application Firewall) to allow custom rules for filtering web traffic.

What is a key benefit of AWS Shield protecting your cloud application?

A Improves application design

B Keeps applications available during DDoS attacks

C Prevents unauthorized data access

D Reduces storage costs

AWS Shield helps keep applications available and responsive by mitigating DDoS attacks that could cause downtime.

Explain the difference between AWS Shield Standard and AWS Shield Advanced.

Think about features and support levels.

Describe why DDoS protection is important for applications hosted on AWS.

Consider the impact of attacks on availability.