SCS-C02 Question 103
Select 3Your organization has recently adopted a hybrid cloud environment with resources both on AWS and on-premises. You are tasked with setting up monitoring to detect unusual behavior in AWS accounts and to ensure compliance with security baselines across all systems. Which combination of tools should you use to meet these requirements effectively?
- A
AWS GuardDuty to detect unusual behavior in AWS accounts
- B
AWS Config to monitor and enforce compliance baselines for AWS resources
- C
AWS Systems Manager to manage and monitor on-premises and AWS resources
- D
Amazon Inspector to monitor resource utilization metrics in your on-premises environment
- E
AWS CloudTrail to monitor API activity and detect security anomalies
Show answer and explanation
Correct answers: A, B, C
Explanation
In a hybrid cloud environment, combining AWS GuardDuty, AWS Config, and AWS Systems Manager allows you to effectively monitor AWS accounts for threats, enforce compliance baselines, and manage both on-premises and AWS resources. While CloudTrail and Amazon Inspector are powerful tools, they do not directly address the requirements of detecting unusual behavior and monitoring compliance baselines.
- A. Correct.
AWS GuardDuty is a threat detection service that helps monitor AWS accounts for unusual and potentially unauthorized behavior, making it an essential tool for detecting threats.
- B. Correct.
AWS Config is used to monitor and enforce compliance baselines for AWS resources, ensuring they adhere to the organization's security and compliance requirements.
- C. Correct.
AWS Systems Manager provides unified management for both AWS and on-premises resources, allowing you to monitor and manage systems in a hybrid environment effectively.
- D. Incorrect.
Amazon Inspector is primarily used for automated vulnerability management and not for monitoring metrics or baselines in on-premises environments.
- E. Incorrect.
AWS CloudTrail tracks API activity and can detect security anomalies but does not provide direct monitoring of metrics or compliance baselines.