AWS认证SAA-C03每日一题

本题库由云计算狂魔微信公众号分享。
【SAA-C03助理级解决方案架构师认证】

A company is designing a cloud communications platform trial is driven by APIs. The application is hosted on Amazon EC2 instances behind a Network Load Balancer (NLB). The company uses Amazon API Gateway to provide external users with access to the application through APIs. The company wants to protect the platform against web exploits like SQL Injection and also wants to detect and mitigate large, sophisticated DDoS attacks. Which combination of solutions provides the MOST protection? (Select TWO.)
A :   Use AWS WAF to protect the NLB
B    :   Use AWS Shield Advanced with the NLB    
C :   Use AWS WAF to protect Amazon API Gateway
D :   Use Amazon GuardDuty with AWS Shield Standard
E :   Use AwS Shield Standard with Amazon API Gateway