Exam AWS Certified Security - Specialty topic 1 question 295 discussion

AB is correct. From AWS documentation, You can use the GuardDuty console to suspend or disable GuardDuty. You are not charged for using GuardDuty when the service is suspended. All optional data sources must be disabled from all detectors in all regions before you can disable or suspend GuardDuty. All member accounts must be disassociated or deleted before you can disable or suspend GuardDuty.

I take back my answer. Answer is .... A & B If you suspend GuardDuty, your existing findings remain intact and are not affected by the GuardDuty suspension. https://docs.aws.amazon.com/guardduty/latest/ug/guardduty_suspend-disable.html

AB are the correct answers. Need to disassociate member accounts, and disable optional data sources. https://docs.aws.amazon.com/guardduty/latest/ug/guardduty_suspend-disable.html

To suspend Amazon GuardDuty, you need to perform the following steps: Disassociate or Delete Member Accounts: If you have set up GuardDuty member accounts, you should disassociate or delete those member accounts. This will ensure that GuardDuty is not actively monitoring those accounts. Disable Associated Monitoring Services: GuardDuty might be integrated with various monitoring services, such as CloudTrail, VPC Flow Logs, and DNS logs. To suspend GuardDuty, you need to disable these associated monitoring services.

It's A&B

Answer AB https://docs.aws.amazon.com/guardduty/latest/ug/guardduty_suspend-disable.html

I would rather backup the finding and then disable..personal opinion.

AB https://docs.aws.amazon.com/guardduty/latest/ug/guardduty_suspend-disable.html

Please NOTE: If you disable GuardDuty, your existing findings and the GuardDuty configuration are lost and can't be recovered. If you want to save your existing findings, you must export them before you disable GuardDuty.

A & B All optional data sources must be disabled from all detectors in all regions before you can disable or suspend GuardDuty. All member accounts must be disassociated or deleted before you can disable or suspend GuardDuty. https://docs.aws.amazon.com/guardduty/latest/ug/guardduty_suspend-disable.html

https://docs.aws.amazon.com/guardduty/latest/ug/guardduty_suspend-disable.html

All optional data sources must be disabled from all detectors in all regions before you can disable or suspend GuardDuty. All member accounts must be disassociated or deleted before you can disable or suspend GuardDuty. A and B

C & E....

C and E ................