An organization is planning to implement protection for its applications on EC2, ELB and Route 53 resources. So it can obtain near real-time visibility into the attacks and prevent sophisticated DDoS attacks.
Which AWS Service would you suggest?

Answer options:

A.AWS Shield Standard
B.AWS Shield Advanced
C.AWS Firewall Manager
D.AWS WAF (Web Application Firewall)

Answer: B
Option A is INCORRECT. AWS Shield Standard helps prevent DDoS attacks that occur commonly and target websites/applications on the transport and network layer. When used in conjunction with Route 53 and Cloudfront, protection is assured against all known layer 3 and layer 4 attacks. AWS Shield Standard is free.
Option B is CORRECT. AWS Shield Advanced protects applications on EC2, ELB, Cloudfront, global accelerator and Route 53 resources. So near real-time visibility into the attacks could be obtained and sophisticated DDoS attacks could be prevented.
Option C is INCORRECT. AWS Firewall Manager helps convenient implementation of compliance and simplifies the firewall rules management across AWS accounts.
Option D is INCORRECT.AWS WAF (Web Application Firewall) offers prevention for APIs and Web Applications from unavailability, security compromise, increased resources consumption.
 Reference:
https://aws.amazon.com/shield/
https://aws.amazon.com/waf/
https://aws.amazon.com/firewall-manager/