AWS Certified Security – Specialty — Question 259

A company is using Amazon GuardDuty in its AWS environment. The company asks a security engineer to suspend GuardDuty.
Which combination of steps must the security engineer perform to meet this requirement? (Choose two.)

Answer options

• A. Disable all optional data sources from all detectors in all regions.
• B. Disassociate or delete all member accounts.
• C. Disable all associated monitoring services.
• D. Delete all existing findings.
• E. Export all existing findings.

Correct answer: A, B

Explanation

The correct answer is A and B, as disabling optional data sources and disassociating member accounts are necessary to suspend GuardDuty effectively. Options C, D, and E are not required to suspend GuardDuty and do not directly contribute to meeting the company's request.