ExpertMedium1 markMultiple Choice
AWS SAA-C03 · Question 10 · Domain 1.2: Secure Workloads
A security team wants to centralize security alerts from multiple AWS services and AWS accounts. They also need to continuously monitor their AWS environment for malicious activity and unauthorized behavior. <br/><br/>Which TWO AWS services should they use? (Select TWO.)
A security team wants to centralize security alerts from multiple AWS services and AWS accounts. They also need to continuously monitor their AWS environment for malicious activity and unauthorized behavior. <br/><br/>Which TWO AWS services should they use? (Select TWO.)
Answer options:
A.
AWS Security Hub
B.
Amazon GuardDuty
C.
Amazon Macie
D.
AWS Shield
E.
AWS CloudTrail
How to approach this question
Match 'centralize security alerts' to Security Hub and 'monitor for malicious activity' to GuardDuty.
Full Answer
AWS Security Hub gives you a comprehensive view of your security alerts and security posture across your AWS accounts. Amazon GuardDuty is a threat detection service that continuously monitors for malicious activity and unauthorized behavior to protect your AWS accounts and workloads.
Common mistakes
Confusing Macie (data privacy) with GuardDuty (threat detection).
Practice the full AWS SAA-C03 Practice Exam 4
65 questions · hints · full answers · grading
More questions from this exam
Q01A company has multiple AWS accounts in an AWS Organizations organization. The security team wants...MediumQ02An application running on Amazon EC2 instances needs to access an Amazon DynamoDB table. Both res...EasyQ03A company is designing a web application that will be hosted on AWS. The application will use an ...MediumQ04A company is building a mobile app that requires users to authenticate using their social media a...HardQ05A solutions architect is designing a VPC for a three-tier web application. The database tier must...Medium