Regarding the question below, even after consulting AWS documentation, it seems to me that none of the four options apply.

I have a question about "AWS Cloud Practitioner Essentials." 

There were many options in other questions that were difficult to understand, but this question was the most baffling of all.

Protect Against DOS and DDoS Attacks with AWS Shield

A: Protection against common DDoS attacks is included in AWS Shield Standard. 

B: Automatic mitigation against common network traffic attacks is included in AWS Shield Standard.

D: Protection against UDP reflection attacks is included in AWS Shield Standard.

C: Amazon CloudFront is also covered by AWS Shield Standard, so it is not an AWS Shield Advanced-only feature. 

https://awsglossary.org/terms/shared-responsibility-model

#Trailhead Challenges