SCS-C02 Question 37
Select 3Your organization has recently migrated its workloads to AWS and wants to enhance its security posture by using AWS managed services to detect potential threats. The security team has identified the need to monitor unusual activity, such as unauthorized access attempts, communication with known malicious IPs, or changes to critical configurations without approval. Which AWS managed services can help address these requirements?
- A
Amazon GuardDuty
- B
AWS Config
- C
Amazon Macie
- D
AWS CloudTrail
- E
AWS Security Hub
Show answer and explanation
Correct answers: A, C, E
Explanation
Amazon GuardDuty, Amazon Macie, and AWS Security Hub are AWS managed services designed to detect and manage threats. GuardDuty specializes in identifying unauthorized or malicious activity in your AWS accounts. Macie focuses on detecting risks related to sensitive data. Security Hub aggregates findings from multiple AWS security services, providing a comprehensive view of your security posture. While AWS Config and CloudTrail are important for compliance and activity logging, they are not primarily focused on threat detection.
- A. Correct.
Amazon GuardDuty is a managed threat detection service that identifies unusual or unauthorized activity, such as communication with malicious IPs or unauthorized access attempts. It is highly relevant for threat detection.
- B. Incorrect.
AWS Config is used for tracking resource configurations and compliance but does not specialize in threat detection. It is primarily focused on configuration management and compliance.
- C. Correct.
Amazon Macie helps identify sensitive data and monitor data access patterns for potential risks, such as unauthorized data access. It can detect threats related to data security.
- D. Incorrect.
AWS CloudTrail provides a record of API calls and user activity but is not a threat detection service. It is useful for audits and investigations rather than real-time threat detection.
- E. Correct.
AWS Security Hub aggregates security findings from various AWS services, including GuardDuty and Macie, making it a central place to view and analyze threats. It enhances threat detection and management.