AWS Certified Cloud Practitioner — Question 772

A company is running an application on AWS. The company wants to identify and prevent the accidental download of malware.

Which AWS service or feature will meet these requirements?

Answer options

• A. Amazon GuardDuty
• B. Network ACL
• C. AWS WAF
• D. AWS Network Firewall

Correct answer: A

Explanation

Amazon GuardDuty includes Malware Protection, which can scan EBS volumes attached to EC2 instances and container workloads to detect and help prevent the spread of malware. Network ACLs, AWS WAF, and AWS Network Firewall are network filtering services that inspect and block traffic based on IP addresses, ports, or web request patterns, but they do not perform file-level malware scanning.