A Company Recently Experienced a DDoS Attack That Prevented Its

question 261

Multiple Choice

A company recently experienced a DDoS attack that prevented its web server from serving content. The website is static and hosts only HTML, CSS, and PDF files that users download. Based on the architecture shown in the image, what is the BEST way to protect the site against future attacks while minimizing the ongoing operational overhead?

• A) Move all the files to an Amazon S3 bucket. Have the web server serve the files from the S3 bucket.
• B) Launch a second Amazon EC2 instance in a new subnet. Launch an Application Load Balancer in front of both instances.
• C) Launch an Application Load Balancer in front of the EC2 instance. Create an Amazon CloudFront distribution in front of the Application Load Balancer.
• D) Move all the files to an S3 bucket. Create a CloudFront distribution in front of the bucket and terminate the web server.

---

Definitions:

Z-statistic

A numerical indicator that shows how a specific value compares to the average of a dataset, expressed as the number of standard deviations away from the mean.

Two-tailed Test

A statistical hypothesis test in which the area of rejection is on both sides of the sampling distribution, allowing for testing in both directions.

Z-statistic

A statistical measure that quantifies the distance (in standard deviation units) a data point is from the mean of a distribution.

Two-tailed Test

A statistical test that considers both directions of an effect, testing the possibility of relationships in both positive and negative directions.