Examkin

Question

Difficulty: EasyThreat Detection and Vulnerability Management

A non-profit organization is setting up its donation portal on AWS and wants to continuously monitor its AWS accounts and workloads for malicious activity, such as unauthorized API calls or potential cryptocurrency mining. Which AWS service should the organization use to detect these threats?

  1. Amazon GuardDutyAnswer
  2. B
    Amazon Inspector
  3. C
    AWS CloudTrail
  4. D
    AWS Shield

Answer

Amazon GuardDuty
Amazon GuardDuty is correct because it is a threat detection service that continuously monitors for malicious activity and unauthorized behavior to protect AWS accounts, workloads, and data.

Step-by-Step Solution

1
Identify the need for continuous threat detection and monitoring of AWS accounts and workloads for malicious activities like cryptocurrency mining.
Determine that a service utilizing machine learning and threat intelligence to analyze log sources is required.
Generic logging or vulnerability scanning will not actively identify ongoing threat patterns.
2
Evaluate the correct AWS security service designed for intelligent threat detection.
Amazon GuardDuty is selected because it continuously monitors CloudTrail, VPC Flow Logs, and DNS logs to identify threat patterns.
Amazon GuardDuty is specifically built for active threat detection across AWS accounts.

Key Concept

Intelligent threat detection using Amazon GuardDuty
Rate this question

Topics

Threat Detection and Vulnerability Management

More questions from this topic