SAA-C03 Question 59
Select 3A retail company wants to enhance the security of its AWS environment. They need to: 1) Detect unusual activities such as unauthorized access attempts and API misuse, 2) Identify and classify sensitive information stored in S3 buckets, and 3) Provide user authentication for their mobile application. Which combination of AWS services should they use to meet these requirements?
- A
Amazon GuardDuty
- B
Amazon Macie
- C
Amazon Cognito
- D
AWS WAF
- E
Amazon Detective
Show answer and explanation
Correct answers: A, B, C
Explanation
To meet the company's requirements: 1) Amazon GuardDuty detects unusual activities such as unauthorized access or API misuse, 2) Amazon Macie identifies and classifies sensitive information in S3 buckets, and 3) Amazon Cognito provides user authentication for their mobile app. Together, these services address the specific security needs described in the scenario.
- A. Correct.
Amazon GuardDuty is a threat detection service that continuously monitors for malicious or unauthorized behavior to protect your AWS accounts and workloads, making it suitable for detecting unusual activities.
- B. Correct.
Amazon Macie uses machine learning to automatically discover, classify, and protect sensitive data in AWS, such as personally identifiable information (PII) in S3 buckets, addressing the need to classify sensitive information.
- C. Correct.
Amazon Cognito provides user authentication, authorization, and user management for web and mobile apps, fulfilling the requirement for user authentication for their mobile application.
- D. Incorrect.
AWS WAF is a web application firewall that helps protect web applications from common web exploits and bots, but it does not fulfill the stated requirements for threat detection, sensitive data classification, or user authentication.
- E. Incorrect.
Amazon Detective helps analyze and visualize security findings, but it is not directly used for detecting unusual activities, classifying sensitive information, or user authentication as specified in the scenario.