AWS Shield is DDoS protection. It defends your applications against distributed denial-of-service attacks that try to overwhelm them with traffic.
Standard vs Advanced
Shield Standard is free and automatic for all AWS customers, covering common layer 3/4 attacks. Shield Advanced is paid and adds protection for larger, sophisticated attacks, 24/7 access to the DDoS response team, cost protection for scaling during an attack, and tighter integration with WAF. Scenario mentions guaranteed DDoS support and cost protection? Advanced.
Test yourself
A high-profile app needs advanced DDoS protection with 24/7 access to AWS’s response team and billing protection during attacks. What do you use?
- Shield Standard
- Shield Advanced
- AWS WAF alone
- A larger EC2 instance
👉 Click to reveal the answer & explanation
Correct answer: B. Shield Advanced adds enhanced DDoS protection, the 24/7 DDoS Response Team, and cost protection during attacks. Shield Standard (A) is basic automatic coverage; WAF (C) handles web exploits, not volumetric DDoS; a bigger instance (D) doesn’t stop an attack.
Related topics
AWS WAF · Amazon CloudFront · Amazon Route 53
Ready to pass the AWS Solutions Architect Associate (SAA-C03)?
Stop guessing whether you’re ready. Our full-length, exam-realistic practice exams put you through the exact question style you’ll face — with a detailed explanation behind every answer, so you learn why, not just what.
- ✓ 6 full-length practice exams
- ✓ A detailed explanation for every single question
- ✓ Realistic, scenario-based questions — not memory dumps
- ✓ Lifetime access, kept current for 2026
Get the SAA-C03 Practice Exams →or try 25 free questions first