A data science team running multiple Amazon SageMaker notebooks wants a managed service that continuously analyzes CloudTrail, VPC Flow, and DNS logs to detect threats. Which AWS service should they enable?
AWS WAF
AWS CloudTrail
Amazon GuardDuty
Amazon Inspector
Amazon GuardDuty is purpose-built for threat detection. It ingests AWS CloudTrail management events, VPC Flow Logs, and DNS query logs, then applies machine learning and threat-intelligence feeds to surface findings such as compromised IAM credentials or port-scanning activity. AWS CloudTrail merely records API calls and offers no built-in detection. Amazon Inspector performs vulnerability assessments on EC2 instances and container images but does not monitor logs for live threats. AWS WAF protects web applications by filtering HTTP/S traffic; it does not analyze account-level logs. Therefore, GuardDuty best meets the requirement for continuous threat detection without extra agents.
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
All IT & Cybersecurity Package plans include the following perks and exams .
Our pricing is simple. Full access to all certifications and exams in each package, for one price.
As many practice tests for as many topics as you want.
Use study mode non-stop, no limits.
Access to our AI assistant, Bash, trained to help you pass your exam.
Track your scores over time in study mode and report cards.
See how you improve over time, and where you need to focus.
Access our store with even bigger discounts than before.
Unlimited access to all performance questions and be prepared for the real thing.
All IT & Cybersecurity Package plans include unlimited access to the following study materials.
Create an account or sign in to access our study materials.