SCS-C02 Question 494
Select 2An organization has observed an unexpected spike in their AWS costs. As a security specialist, you are tasked with identifying potential anomalies in the usage that might have caused this spike. Which of the following actions would help you detect and investigate such anomalies effectively? (Choose TWO)
- A
Enable AWS Cost Anomaly Detection and configure alerts for unusual spending patterns.
- B
Review the AWS CloudTrail logs to identify any unauthorized API calls or changes to resource configurations.
- C
Use Amazon Inspector to scan for security vulnerabilities in EC2 instances.
- D
Analyze the AWS Cost and Usage Report (CUR) to identify trends or sudden increases in service usage.
- E
Set up AWS Trusted Advisor for recommendations on cost optimization.
Show answer and explanation
Correct answers: A, D
Explanation
To identify and investigate cost anomalies effectively, you need tools designed for monitoring and analyzing cost and usage patterns. AWS Cost Anomaly Detection helps proactively detect unusual spending, while the AWS Cost and Usage Report (CUR) provides detailed data for identifying trends or sudden spikes. These two tools complement each other in anomaly detection and investigation. Other tools like Amazon Inspector, Trusted Advisor, and CloudTrail serve different purposes and are not focused on cost anomaly identification.
- A. Correct.
Correct: AWS Cost Anomaly Detection uses machine learning to identify unusual spending patterns and can send alerts when anomalies are detected, helping to trace unexpected cost spikes.
- B. Incorrect.
Correct: AWS Cost and Usage Report (CUR) provides detailed insights into usage and costs, making it easier to identify specific services or resources contributing to the sudden expense.
- C. Incorrect.
Incorrect: Amazon Inspector is used for scanning security vulnerabilities in EC2 instances and containers, but it does not directly help in identifying cost anomalies.
- D. Correct.
Incorrect: While AWS Trusted Advisor provides recommendations for cost optimization, it is not specifically designed to detect or analyze anomalies in cost and usage.
- E. Incorrect.
Incorrect: AWS CloudTrail is used for tracking API activity and changes in the AWS environment, which might not directly correlate with cost anomalies unless a breach or unauthorized activity is suspected.