AWS Certified Cloud Practitioner — Question 296

Which AWS service supports the analysis, investigation, and identification of the root cause of security events and suspicious activities in an AWS account?

Answer options

• A. Amazon Inspector
• B. Amazon Macie
• C. Amazon Detective
• D. Amazon CloudWatch

Correct answer: C

Explanation

Amazon Detective simplifies the investigative process by automatically analyzing and visualizing security data to help find the root cause of potential security issues. Amazon Inspector is designed for automated vulnerability assessments, Amazon Macie focuses on sensitive data discovery, and Amazon CloudWatch is a general monitoring and observability service.