You are designing a social media site and are considering how to mitigate distributed denial-of-service (DDoS) attacks. Which of the below are viable mitigation techniques? Choose 3 answers from the options below

Answer options:

A.Add multiple elastic network interfaces (ENIs) to each EC2 instance to increase the network bandwidth.
B.Use dedicated instances to ensure that each instance has the maximum performance possible.
C.Use an Amazon CloudFront distribution ( WAF enabled ) for both static and dynamic content.
D.Use an Elastic Load Balancer with auto scaling groups at the web application tier and Route53 with a routing policy ( like "weighted routing policy" ) for the EC2 instances
E.Add alert Amazon CloudWatch to look for high Network in and CPU utilization.
F.Create processes and capabilities to quickly add and remove rules to the instance OS firewall.

Answer – C,D and E
The below snapshot from the AWS documentation shows the best architecture practises for avoiding DDos attacks.
For best practises against DDos attacks , please visit the below link:
https://d0.awsstatic.com/whitepapers/DDoS_White_Paper_June2015.pdf