AWS Certified Cloud Practitioner (CLF-C02) — Question 707

An AWS user wants to proactively detect when an instance or account might be compromised or if there are threats from attacks.

Which AWS service should the user choose?

Answer options

Correct answer: A

Explanation

Amazon GuardDuty is a continuous security monitoring service that analyzes data sources to identify potential threats, compromised instances, and unauthorized activities within your AWS account. AWS WAF and AWS Shield protect applications from web exploits and DDoS attacks, respectively, while Amazon Inspector is used for finding security vulnerabilities in applications and instances rather than active threat detection.