A multi-national company has deployed its web application servers on Amazon EC2 Instance. This company is a part of AWS Shield Advanced to protect against DDoS attacks and is looking to get notified when any malicious activities happen. You have been assigned to create an Amazon CloudWatch alarm using AWS Shield Advanced metrics.
What is the correct way of creating these alarms?

Answer options:

A.Create an alarm in the CloudWatch console and then choose AWSDDOSProtectionMetrics.
B.Create an alarm in the CloudWatch console and then choose DDoSDetected.
C.Create an alarm in the CloudWatch console and then choose VolumeBitsPerSecond metric.
D.Create an alarm in the CloudWatch console and then choose top contributor`s metrics.

Correct Answer: A
While creating Amazon CloudWatch metrics using AWS Shield Advanced metrics, the following steps need to be followed.
Create an alarm in the Amazon CloudWatch console.
Choose “AWSDDOSProtectionMetrics” which are only available for AWS Shield Advanced.
Option B is incorrect because while creating CloudWatch metrics using AWS Shield metrics, AWSDDOSProtectionMetrics need to be selected and not DDoSDetected.
Option C is incorrect because while creating CloudWatch metrics using AWS Shield metrics, AWSDDOSProtectionMetrics need to be selected first, and then any other metric can be selected.
Option D is incorrect because while creating CloudWatch metrics using AWS Shield metrics, AWSDDOSProtectionMetrics need to be selected first, and then any other metric can be selected.
For more information on AWS Shield, refer to the following URL,
https://docs.aws.amazon.com/waf/latest/developerguide/monitoring-cloudwatch.html#set-ddos-alarms