Examkin

Question

Difficulty: EasyThreat Detection and Vulnerability Management

An online retail company wants to implement a service that continuously monitors their AWS accounts and workloads for malicious activity and unauthorized behavior. Which AWS service provides this threat detection capability?

  1. A
    Amazon Inspector
  2. B
    AWS CloudTrail
  3. Amazon GuardDutyAnswer
  4. D
    AWS Artifact

Answer

Amazon GuardDuty
Amazon GuardDuty is the correct service because it provides continuous threat detection by monitoring activities across AWS accounts and workloads to find anomalies, unauthorized behavior, or known malicious signatures.

Step-by-Step Solution

1
Identify the primary requirement in the scenario.
The requirement is to continuously monitor AWS accounts and workloads for malicious activity and unauthorized behavior.
This helps determine the category of service needed, specifically threat detection.
2
Map the threat detection requirement to the correct AWS service capability.
Amazon GuardDuty is the AWS service that uses machine learning and threat intelligence to identify anomalous and malicious activities.
Matching the service features to the operational requirement confirms the correct choice.

Key Concept

Amazon GuardDuty is a managed threat detection service that continuously monitors AWS accounts, workloads, and data for malicious activity and unauthorized behavior.
Rate this question

Topics

Threat Detection and Vulnerability Management

More questions from this topic