SCS-C02 exam dumps

SCS-C02 practice question 37 of 504

AWS Certified Security - Specialty. Expert level, Amazon Web Services. Free question with the correct answer and a full explanation.

SCS-C02 Question 37

Select 3

Your organization has recently migrated its workloads to AWS and wants to enhance its security posture by using AWS managed services to detect potential threats. The security team has identified the need to monitor unusual activity, such as unauthorized access attempts, communication with known malicious IPs, or changes to critical configurations without approval. Which AWS managed services can help address these requirements?

  1. A

    Amazon GuardDuty

  2. B

    AWS Config

  3. C

    Amazon Macie

  4. D

    AWS CloudTrail

  5. E

    AWS Security Hub

Show answer and explanation

Correct answers: A, C, E

Explanation

Amazon GuardDuty, Amazon Macie, and AWS Security Hub are AWS managed services designed to detect and manage threats. GuardDuty specializes in identifying unauthorized or malicious activity in your AWS accounts. Macie focuses on detecting risks related to sensitive data. Security Hub aggregates findings from multiple AWS security services, providing a comprehensive view of your security posture. While AWS Config and CloudTrail are important for compliance and activity logging, they are not primarily focused on threat detection.

  • A. Correct.

    Amazon GuardDuty is a managed threat detection service that identifies unusual or unauthorized activity, such as communication with malicious IPs or unauthorized access attempts. It is highly relevant for threat detection.

  • B. Incorrect.

    AWS Config is used for tracking resource configurations and compliance but does not specialize in threat detection. It is primarily focused on configuration management and compliance.

  • C. Correct.

    Amazon Macie helps identify sensitive data and monitor data access patterns for potential risks, such as unauthorized data access. It can detect threats related to data security.

  • D. Incorrect.

    AWS CloudTrail provides a record of API calls and user activity but is not a threat detection service. It is useful for audits and investigations rather than real-time threat detection.

  • E. Correct.

    AWS Security Hub aggregates security findings from various AWS services, including GuardDuty and Macie, making it a central place to view and analyze threats. It enhances threat detection and management.

Timed practice exam

Take a SCS-C02 practice test under exam conditions

65 questions in 170 minutes, drawn from this bank, with a score report and a per-question review when you finish.

Start timed exam