AWS Certified Cloud Practitioner — Question 543

A company needs to continuously monitor its environment to analyze network and account activity and identify potential security threats.

Which AWS service should the company use to meet these requirements?

Answer options

• A. AWS Artifact
• B. Amazon Macie
• C. AWS Identity and Access Management (IAM)
• D. Amazon GuardDuty

Correct answer: D

Explanation

Amazon GuardDuty is a threat detection service that continuously monitors for malicious activity and unauthorized behavior by analyzing AWS account and network logs. AWS Artifact provides on-demand access to AWS compliance documentation, Amazon Macie discovers and protects sensitive data, and IAM manages user access and permissions.