Minor answer quibble

[Sean Carr]

A company recently patched a vulnerability in its web application hosted on AWS. The solutions architect was tasked to improve the security of the company’s AWS resources as well as secure the web applications from common web vulnerabilities and cyber attacks. One example is a Distributed Denial of Service attack (DDoS) in which there is numerous incoming traffic coming from many different locations that simultaneously target the company web application and floods the network with bogus requests.

Which of the following options are recommended strategies for reducing DDoS attack surface and minimizing the blast radius in the cloud infrastructure? (Select TWO.)

Always add a security group that only allows certain ports and authorized servers and protects your origin servers by putting it behind a CloudFront distribution. Enable AWS Shield Advanced which provides enhanced DDoS attack detection and monitoring for application-layer traffic to your AWS resources.

I think the bolded sentence would read better if “protects” was changed to “protect”. It kind of implies that the security group is responsible for protecting the origin servers by putting them behind a CF Distribution. Very minor issue I know and its obvious what is meant.

[Irene-TutorialsDojo]

Hello Sean Carr,

Thank you for your feedback! You are absolutely right. The sentence could indeed be more grammatically accurate if we change “protects” to “protect” to make it clearer that the security group is part of the strategy, rather than implying that it is solely responsible for protecting the origin servers by placing them behind a CloudFront distribution.

This revision clarifies the intent that both the security group and CloudFront distribution contribute to the protection of the origin servers, while AWS Shield Advanced provides additional DDoS protection.

Thank you for pointing that out! We always appreciate your attention to detail. Let us know if you have any further suggestions or questions!

Best,

Irene @ Tutorialsdojo