Question from mock test of Cloud Practitioner

Hello, I would like to ask for an explanation regarding the correct answer for the question below:

Answers 2 and 4 seem to be both legit for describing AWS Shield. Why is one wrong but the other is correct?
Thanks in advance.

Hi @Mundofik

The question is about Web Application Firewall (WAF), its a firewall that sits at the edge of the network and filters traffic based on pre-defined rules based on IP addresses, HTTP headers, HTTP body, URI strings, etc.

Whereas AWS Shield protects against DDoS attacks.

The one you chose appears to be a function of a Static analysis tool to scan applications for vulnerabilities.

AWS’s FaQ on each Service documents the details of each service’s capabilities.