AWS Certified Cloud Practitioner — Question 921

Which AWS service monitors AWS accounts for security threats?

Answer options

• A. Amazon GuardDuty
• B. AWS Secrets Manager
• C. Amazon Cognito
• D. AWS Certificate Manager (ACM)

Correct answer: A

Explanation

Amazon GuardDuty is the correct choice because it is a dedicated threat detection service that continuously monitors AWS accounts, workloads, and data for malicious activity. In contrast, AWS Secrets Manager is used for credential management, Amazon Cognito provides user identity management for applications, and AWS Certificate Manager handles SSL/TLS certificates.