Exam AWS Certified Cloud Practitioner topic 1 question 220 discussion

C "Amazon GuardDuty is a threat detection service that continuously monitors your AWS accounts and workloads for malicious activity and delivers detailed security findings for visibility and remediation."

Amazon GuardDuty is a threat detection service offered by AWS. It continuously monitors and analyzes various data sources, such as AWS CloudTrail logs, VPC Flow Logs, and DNS logs, to detect potential security threats and malicious activities within your AWS environment. GuardDuty uses machine learning algorithms and anomaly detection techniques to identify patterns and behaviors that indicate unauthorized access attempts, compromised instances, data exfiltration, and other malicious activities. It provides detailed findings and alerts to help you quickly respond to and mitigate security incidents. By leveraging GuardDuty, customers can enhance the security of their AWS workloads by proactively identifying and addressing potential security threats and vulnerabilities. It helps to improve the overall security posture of your AWS environment by automating the detection and response to security events.

https://aws.amazon.com/guardduty/ "Continuously monitor your AWS accounts, instances, serverless and container workloads, users, databases, and storage for potential threats."

The primary use case for Amazon GuardDuty is C. Automatic monitoring for threats to AWS workloads. Amazon GuardDuty is a threat detection service that continuously monitors for malicious activity and unauthorized behavior in AWS accounts and workloads. It uses machine learning, anomaly detection, and integrated threat intelligence to identify potential security threats, such as compromised instances, unauthorized access to AWS resources, and attempts to exploit known vulnerabilities. GuardDuty alerts users to potential security findings and provides actionable insights to help remediate security issues in real-time. Amazon GuardDuty is not designed for preventing DDoS attacks or protecting against SQL injection attacks, nor is it for automatic provisioning of AWS resources.

A 'guard' is placed to 'monitor'.

C is the answer.

DDoS protection - Sheild, SQL injection protection - WAF

Amazon GuardDuty is a threat detection service that continuously monitors your AWS accounts and workloads for malicious activity and delivers detailed security findings for visibility and remediation.

https://aws.amazon.com/guardduty/