Halloween Special 2026! Get Up to 25% OFF Practice Questions! Limited Time - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

EC-Council 312-40 Exam - Topic 7 Question 10 Discussion

Posted by Roslyn on Jul 16, 2024 at 06:51 PM

An AWS customer was targeted with a series of HTTPS DDoS attacks, believed to be the largest layer 7 DDoS reported to date. Starting around 10 AM ET on March 1, 2023, more than 15,500 requests per second (rps) began targeting the AWS customer's load balancer. After 10 min, the number of requests increased to 2,50,000 rps.

This attack resembled receiving the entire daily traffic in only 10s. An AWS service was used to sense and mitigate this DDoS attack as well as prevent bad bots and application vulnerabilities. Identify which of the following AWS services can accomplish this.

Suggested Answer: B

To effectively overcome shadow IT and unwarranted usage of cloud resources at FinTech Inc., the organization should implement cloud governance.

1.Cloud Governance Defined: Cloud governance is a set of rules and policies that govern the use of cloud resources. It ensures that the IT infrastructure is used in a way that aligns with the company's strategic goals, compliance requirements, and security standards1.

1.Addressing Shadow IT:

oPolicy Creation: Establish clear policies regarding the use of cloud services and the procurement of IT resources.

oEnforcement Mechanisms: Implement controls to enforce these policies, such as requiring approval for new cloud services or software.

oEducation and Training: Educate employees about the risks associated with shadow IT and the importance of following IT department rules.

oMonitoring and Reporting: Use tools to monitor cloud usage and report on compliance with governance policies.

1.Benefits of Cloud Governance:

oControl and Visibility: Provides better control over IT resources and visibility into how they are being used.

oCost Management: Helps prevent unnecessary spending on unapproved cloud services.

oSecurity and Compliance: Ensures that cloud services are used in a secure and compliant manner, reducing the risk of breaches.


Microsoft Learn: Discover and manage Shadow IT1.

CrowdStrike: What is Shadow IT? Defining Risks & Benefits2.

Microsoft Security Blog: Top 10 actions to secure your environment3.

SC Magazine: Stop chasing shadow IT: Tackle the root causes of cloud breaches4.

Get Premium 312-40 Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test
44 comments · newest first
JO
Joni 11 months ago
Wait, 15,500 to 250,000 rps? How is that even possible?
BE
Bette 11 months ago
I disagree, I think Amazon CloudFront could also help with this.
VA
Vallie 11 months ago
I thought DDoS attacks were getting less common, guess I was wrong!
JA
Javier 12 months ago
Pretty sure AWS Shield Standard is the right service for DDoS protection.
JE
Jesusita 12 months ago
That's insane! 250,000 rps in just 10 minutes!
SH
Shoshana 1 year ago
I’m a bit confused; I thought AWS EBS was more about storage solutions, not DDoS protection.
EM
Emelda 1 year ago
I practiced a similar question, and I think AWS Shield Standard is the right choice since it provides automatic protection against DDoS attacks.
MI
Michal 1 year ago
I’m not entirely sure, but I feel like Amazon CloudFront could help with distributing traffic and absorbing some of the load.
LA
Lacresha 1 year ago
I remember studying DDoS mitigation strategies, and I think AWS Shield Standard is specifically designed for that kind of attack.
MA
Matthew 1 year ago
I've got a good feeling about this. Based on the details provided, AWS Shield Standard seems like the service that can handle this type of large-scale, layer 7 DDoS attack.
ST
Stephaine 1 year ago
Okay, the key here is identifying the AWS service that can sense and mitigate DDoS attacks, as well as protect against bad bots and application vulnerabilities. I'm thinking CloudFront or AWS Shield Standard.
JA
Javier 1 year ago
Hmm, I'm a bit confused by the details here. I'll need to carefully read through the question and think it through step-by-step.
LA
Lai 1 year ago
This seems like a pretty straightforward DDoS mitigation question. I'm pretty confident I can figure this out.
PE
Peggie 1 year ago
This is a tricky one. I'll need to review my notes on AWS DDoS protection services to make sure I choose the right option.
KA
Kanisha 1 year ago
Okay, I've got a strategy here. I'll start by eliminating the options that don't seem directly related to the SMTP integration problem, then focus on the one that seems most likely to provide the needed troubleshooting information.
VI
Vincent 1 year ago
This question requires some technical knowledge about Intrusion Detection Systems. I'll need to review my notes to make sure I have a good grasp of their features and limitations.
LA
Launa 1 year ago
I'm leaning towards the Disaster Recovery Plan. That's usually the go-to for minimizing disruptions and getting operations back up and running after an incident.
MA
Marlon 1 year ago
I hope the AWS team had their coffee that day to handle a DDoS attack that big. Guess they're used to the caffeinated chaos.
DE
Dean 1 year ago
↳ replying to Marlon
D) AWS EBS
ME
Merrilee 1 year ago
↳ replying to Marlon
I hope they had their coffee ready for that chaos!
MA
Maybelle 1 year ago
↳ replying to Marlon
C) AWS Shield Standard is specifically designed to protect against DDoS attacks.
MA
Marjory 1 year ago
↳ replying to Marlon
B) Amazon CloudFront can help mitigate DDoS attacks.
AR
Aretha 1 year ago
↳ replying to Marlon
I hope they had a strong firewall in place.
EL
Elke 1 year ago
↳ replying to Marlon
C) AWS Shield Standard
LE
Leslie 1 year ago
↳ replying to Marlon
B) Amazon CloudFront
LE
Leah 1 year ago
AWS Direct Connect? That's for private network connections, not DDoS mitigation. C'mon, this is too easy. AWS Shield Standard is the answer.
MA
Maurine 1 year ago
↳ replying to Leah
AWS Shield Standard is specifically designed for protecting against DDoS attacks.
AV
Avery 1 year ago
↳ replying to Leah
Yeah, AWS Direct Connect is definitely not the right option for this scenario.
QU
Quinn 1 year ago
↳ replying to Leah
I agree, AWS Shield Standard is the right choice for DDoS mitigation.
DA
Daniel 1 year ago
↳ replying to Leah
AWS Shield Standard is the way to go for mitigating DDoS attacks on AWS.
SH
Shawnee 1 year ago
↳ replying to Leah
Yeah, AWS Direct Connect is definitely not the right choice for this scenario.
AM
Amie 1 year ago
↳ replying to Leah
I agree, AWS Shield Standard is specifically designed for DDoS protection.
TA
Tammi 2 years ago
AWS EBS? Really? That's for block storage, not DDoS protection. The correct answer has to be AWS Shield Standard.
IR
Ira 1 year ago
↳ replying to Tammi
Yeah, AWS EBS is definitely not the right choice for mitigating DDoS attacks. AWS Shield Standard is the way to go.
JA
Janessa 1 year ago
↳ replying to Tammi
I think you're right, AWS Shield Standard is the service designed for DDoS protection.
RE
Regenia 2 years ago
I'm not sure, but I think Amazon CloudFront can also help in preventing DDoS attacks by distributing traffic across multiple servers.
JA
Jackie 2 years ago
I'm not sure CloudFront would be the best option, as it's more focused on content delivery than DDoS mitigation. AWS Shield Standard seems like the way to go.
YO
Yolando 2 years ago
I agree with Catina, AWS Shield Standard is specifically built for mitigating DDoS attacks.
CA
Catina 2 years ago
I think the answer is C) AWS Shield Standard because it is designed to protect against DDoS attacks.
SA
Salome 2 years ago
AWS Shield Standard seems like the obvious choice here. It's designed to protect against DDoS attacks and can handle large-scale attacks like the one described.
DA
Daron 1 year ago
↳ replying to Salome
It's good to know that AWS has services like this to handle such large-scale attacks.
BA
Bambi 1 year ago
↳ replying to Salome
Yes, AWS Shield Standard is specifically built for protecting against DDoS attacks.
NA
Nana 1 year ago
↳ replying to Salome
I think AWS Shield Standard is the right choice too.
MA
Martina 1 year ago
↳ replying to Salome
C) AWS Shield Standard
0/2000 characters

Save Cancel