Exam AWS Certified Solutions Architect - Associate SAA-C03 topic 1 question 616 discussion

The key reasons are: Amazon GuardDuty is a threat detection service that continuously monitors for malicious activity and unauthorized behavior. It analyzes AWS CloudTrail, VPC Flow Logs, and DNS logs. GuardDuty can detect threats like instance or S3 bucket compromise, malicious IP addresses, or unusual API calls. Findings can be sent to AWS Security Hub which provides a centralized security dashboard and alerts. Amazon Macie and Amazon Inspector do not monitor the breadth of activity that GuardDuty does. They focus more on data security and application vulnerabilities respectively. AWS Config monitors for resource configuration changes, not malicious activity.

- Amazon Inspector = automated vulnerability management service - Amazon GuardDuty = threat detection service that monitors for malicious activity and anomalous behavior to protect AWS accounts, workloads, and data.

“ continuously monitors for malicious activity in the AWS account, workloads, and access patterns to the S3 bucket” only guard duty for this purpose in the options

Amazon Inspector provides you with security assessments of your applications settings and configurations on your EC2 instances while Amazon GuardDuty helps with analyzing your entire AWS environment for potential threats. AWS Security Hub is a cloud security posture management service that aggregates alerts, and enables automated remediation.

Guardduty

What Guard Duty is for.

Answer is C.

C is the correct. https://aws.amazon.com/guardduty/

Answer is C Since Amazon GuardDuty is a threat detection service that continuously monitors for malicious activity and unauthorized behavior to protect your AWS accounts, Amazon Elastic Compute Cloud (EC2) workloads, container applications, Amazon Aurora databases, and data stored in Amazon Simple Storage Service (S3).

Gaurd duty is a threat detection service for accounts and workloads.