Your company has deployed applications in AWS. Recently your company’s services have been hit by a massive DDoS attack, which resulted in huge financial loss. You have a plan to enable AWS Shield Advanced in the AWS environment. Which of the following resource types can help to expand the DDoS attack protection? (Select TWO.)

Answer options:

A.Amazon S3
B.Amazon CloudFront distributions
C.AWS CloudFormation
D.AWS Lambda
E.Amazon Route 53 hosted zones

Correct Answers: B and E
Options B and E are CORRECT because AWS Shield Advanced enables higher levels of protection against DDoS attacks, including the following resource types:
Amazon CloudFront distributions
Amazon Route 53 hosted zones
AWS Global Accelerator accelerators
Application load balancers
Elastic Load Balancing (ELB) load balancers
Amazon Elastic Compute Cloud (Amazon EC2) Elastic IP addresses
Options A, C and D are incorrect because these services are not the ones that AWS Shield Advanced can further protect.
Reference:
https://docs.aws.amazon.com/waf/latest/developerguide/ddos-overview.html