A company wants to continuously monitor its AWS accounts for malicious activity, such as unusual API calls or unauthorized deployments, using machine learning and threat intelligence.<br/><br/>Which AWS service should be used?

Answer options:

AWS CloudTrail

Amazon GuardDuty

AWS Security Hub

Amazon Inspector

How to approach this question

Look for keywords like 'threat detection' and 'machine learning'.

Full Answer

B.Amazon GuardDuty✓ Correct

Amazon GuardDuty

Amazon GuardDuty is an intelligent threat detection service that continuously monitors your AWS accounts and workloads for malicious activity and delivers detailed security findings for visibility and remediation.

Common mistakes

Choosing CloudTrail, which only records the logs but doesn't analyze them for threats.

Question 09 All questions Question 11

Practice the full AWS SAA-C03 Practice Exam 6

65 questions · hints · full answers · grading

More questions from this exam

Q01A company has multiple AWS accounts in an AWS Organizations organization. The security team wants...Medium Q02A company has two AWS accounts: Account A for development and Account B for production. Developer...Medium Q03A mobile application needs to authenticate users using their social media accounts (Facebook, Goo...Easy Q04A company is running an application on Amazon EC2 instances. The application needs to connect to ...Medium Q05A company has 50 AWS accounts managed by AWS Organizations. The IT team wants to implement a cent...Easy

View all 65 questions →