Examkin

Soru

Zorluk: KolayThreat Detection and Vulnerability Management

A non-profit organization is setting up its donation portal on AWS and wants to continuously monitor its AWS accounts and workloads for malicious activity, such as unauthorized API calls or potential cryptocurrency mining. Which AWS service should the organization use to detect these threats?

  1. Amazon GuardDutyCevap
  2. B
    Amazon Inspector
  3. C
    AWS CloudTrail
  4. D
    AWS Shield

Cevap

Amazon GuardDuty
Amazon GuardDuty is correct because it is a threat detection service that continuously monitors for malicious activity and unauthorized behavior to protect AWS accounts, workloads, and data.

Adım Adım Çözüm

1
Identify the need for continuous threat detection and monitoring of AWS accounts and workloads for malicious activities like cryptocurrency mining.
Determine that a service utilizing machine learning and threat intelligence to analyze log sources is required.
Generic logging or vulnerability scanning will not actively identify ongoing threat patterns.
2
Evaluate the correct AWS security service designed for intelligent threat detection.
Amazon GuardDuty is selected because it continuously monitors CloudTrail, VPC Flow Logs, and DNS logs to identify threat patterns.
Amazon GuardDuty is specifically built for active threat detection across AWS accounts.

Anahtar Kavram

Intelligent threat detection using Amazon GuardDuty
Bu soruyu puanla

Konular

Threat Detection and Vulnerability Management

Bu konudan daha fazla soru