AWS Certified Cloud Practitioner — Question 257

A company needs an AWS service that will continuously monitor the company's AWS account for suspicious activity. The service must have the ability to initiate automated actions against threats that are identified in the security findings.
Which service will meet these requirements?

Answer options

Correct answer: D

Explanation

Amazon GuardDuty is designed to continuously monitor AWS accounts for malicious activity and can automatically respond to identified threats, making it the ideal choice. In contrast, AWS Trusted Advisor provides optimization recommendations, Amazon Detective helps investigate security issues, and Amazon Inspector focuses on assessing application security rather than monitoring for threats.