AWS Certified Cloud Practitioner — Question 327

A company wants to use machine learning to identify suspicious activities in its AWS account.

Which AWS service provides this functionality?

Answer options

• A. AWS Shield
• B. Amazon Macie
• C. Amazon Detective
• D. AWS WAF

Correct answer: C

Explanation

Amazon Detective automatically collects log data from your AWS resources and uses machine learning, statistical analysis, and graph theory to help security teams investigate and analyze suspicious activities. AWS Shield is designed for DDoS protection, AWS WAF is a web application firewall for blocking malicious web traffic, and Amazon Macie is used specifically for discovering and protecting sensitive data in Amazon S3.