SCS-C02 Question 40
Select 3Your company hosts a large-scale e-commerce platform on AWS that processes sensitive customer data. To strengthen your security posture, you want to detect potential malicious activities such as unauthorized access, unusual API calls, and compromised resources. Which AWS managed security service(s) should you use to meet this requirement?
- A
Amazon GuardDuty
- B
AWS Shield Advanced
- C
AWS Config
- D
Amazon Macie
- E
AWS CloudTrail
Show answer and explanation
Correct answers: A, D, E
Explanation
The combination of Amazon GuardDuty, Amazon Macie, and AWS CloudTrail allows you to monitor and detect threats effectively. GuardDuty detects unauthorized access and malicious activity, Macie helps identify risks related to sensitive data, and CloudTrail provides visibility into API activity to analyze suspicious behavior. While AWS Shield Advanced and AWS Config are useful security tools, they do not provide the specific threat detection capabilities required in this scenario.
- A. Correct.
Amazon GuardDuty is a managed threat detection service that monitors for malicious or unauthorized behavior, such as unusual API activity or unauthorized access.
- B. Incorrect.
AWS Shield Advanced is primarily used for DDoS protection and does not provide threat detection for activities like unusual API calls or unauthorized access.
- C. Incorrect.
AWS Config is a service for resource configuration compliance and auditing, not for real-time threat detection.
- D. Correct.
Amazon Macie is a managed security service designed for discovering and protecting sensitive data, which can also identify potential security risks like data leaks.
- E. Correct.
AWS CloudTrail provides visibility into API calls and user activity, helping you detect unusual or unauthorized activities by analyzing log data.