ANS-C01 Network Security, Compliance and Governance Practice Question
Which TWO features are provided by AWS Shield Advanced that are not available in AWS Shield Standard? (Choose 2)
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
DDoS cost protection
Shield Advanced provides DDoS cost protection (option B) and 24/7 access to the AWS DDoS Response Team (option D). Option A is incorrect because automatic web application firewall rule updates are not a feature of Shield Advanced; AWS WAF can be integrated but rules are not automatically updated. Option C is incorrect because detailed DDoS logs are not a distinct feature of Shield Advanced; both Standard and Advanced provide access to AWS Shield logs. Option E is incorrect because network-layer DDoS protection (e.g., SYN flood, UDP flood) is provided by both Shield Standard and Shield Advanced; Advanced adds application-layer protection and other benefits.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Automatic web application firewall rule updates
Why it's wrong here
Shield Advanced does not automatically update WAF rules.
- ✓
DDoS cost protection
Why this is correct
Shield Advanced offers protection against scaling charges due to DDoS.
- ✗
Access to detailed DDoS logs
Why it's wrong here
Detailed logs require additional configuration, not exclusive to Advanced.
- ✓
24/7 access to the AWS DDoS Response Team
Why this is correct
This is a key feature of Shield Advanced.
- ✗
Network-layer DDoS protection
Why it's wrong here
Standard also provides network-layer protection.
Go deeper
Related to this question
About these practice questions
One of 1,621 original ANS-C01 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This ANS-C01 practice question is part of Courseiva's free Amazon Web Services certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the ANS-C01 exam.