AWS Certified Cloud Practitioner (CLF-C02) — Question 602

What is the primary use case for Amazon GuardDuty?

Answer options

• A. Prevention of DDoS attacks
• B. Protection against SQL injection attacks
• C. Automatic monitoring for threats to AWS workloads
• D. Automatic provisioning of AWS resources

Correct answer: C

Explanation

Amazon GuardDuty is a continuous security monitoring service that analyzes log data to detect threats and unauthorized activities within your AWS environment. It does not provision resources, which is handled by services like AWS CloudFormation, nor does it directly mitigate DDoS or SQL injection attacks, which are typically addressed by AWS Shield and AWS WAF respectively.