SAP-C02 Design for New Solutions Practice Question
A company is designing a new web application with a global user base. They need to improve latency for static content and protect against DDoS attacks. Which services should they use? (Choose THREE.)
⚠ Common exam trap
The trap here is that candidates often select AWS Global Accelerator or Route 53 thinking they provide caching or DDoS protection, but Global Accelerator only optimizes network path and Route 53 only handles DNS resolution—neither caches static content nor mitigates application-layer DDoS attacks like CloudFront and WAF do.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
AWS Shield
AWS Shield (Standard, included by default) provides always-on detection and automatic inline mitigations to protect against common DDoS attacks at Layer 3 and Layer 4. For a global web application, this foundational protection is essential to maintain availability and low latency under attack.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
AWS Shield
Why this is correct
DDoS protection.
- ✗
AWS Global Accelerator
Why it's wrong here
Improves latency for TCP/UDP traffic, but not for static content and DDoS.
- ✗
Amazon Route 53
Why it's wrong here
DNS service, not for content delivery or DDoS.
- ✓
AWS WAF
Why this is correct
Web application firewall to filter traffic.
- ✓
Amazon CloudFront
Why this is correct
CDN for low-latency content delivery.
Go deeper
Related to this question
About these practice questions
This SAP-C02 question is part of Courseiva's 1,660-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This SAP-C02 practice question is part of Courseiva's free Amazon Web Services certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SAP-C02 exam.