Exam AWS Certified Security - Specialty SCS-C02 topic 1 question 302 discussion

Exam question from Amazon's AWS Certified Security - Specialty SCS-C02

Question #: 302
Topic #: 1

[All AWS Certified Security - Specialty SCS-C02 Questions]

A company is investigating an increase in its AWS monthly bill. The company discovers that bad actors compromised some Amazon EC2 instances and served webpages for a large email phishing campaign.

A security engineer must implement a solution to monitor for cost increases in the future to help detect malicious activity.

Which solution will offer the company the EARLIEST detection of cost increases?

A. Create an Amazon EventBridge rule that invokes an AWS Lambda function hourly. Program the Lambda function to download an AWS usage report from AWS Data Exports about usage of all services. Program the Lambda function to analyze the report and to send a notification when anomalies are detected.
B. Create a cost monitor in AWS Cost Anomaly Detection. Configure an individual alert to notify an Amazon Simple Notification Service (Amazon SNS) topic when the percentage above the expected cost exceeds a threshold.
C. Review AWS Cost Explorer daily to detect anomalies in cost from prior months. Review the usage of any services that experience a significant cost increase from prior months.
D. Capture VPC flow logs from the VPC where the EC2 instances run. Use a third-party network analysis tool to analyze the flow logs and to detect anomalies in network traffic that might increase cost.

Show Suggested Answer

Suggested Answer: B 🗳️

by Seidor_Analytics at July 31, 2025, 4:23 a.m.

Disclaimers:

- ExamTopics website is not related to, affiliated with, endorsed or authorized by Amazon.
- Trademarks, certification & product names are used for reference only and belong to Amazon.

Comments

Submit Cancel

de1612d

2 weeks, 4 days ago

Selected Answer: B

Option B (AWS Cost Anomaly Detection) is the most effective solution for detecting cost increases quickly. It uses machine learning to identify abnormal cost patterns in near real-time and sends immediate notifications via Amazon SNS when thresholds are exceeded.Why not Option A:Option A involves creating an Amazon EventBridge rule to invoke an AWS Lambda function hourly to download and analyze AWS usage reports from AWS Data Exports. While effective, this approach is less optimal because:It operates on an hourly schedule, which delays detection compared to the near real-time monitoring of AWS Cost Anomaly Detection. It requires custom programming and maintenance, increasing complexity and potential points of failure. Analyzing reports manually or through custom logic may not be as efficient or accurate as the machine learning-driven anomaly detection in Option B.

upvoted 2 times

...

Seidor_Analytics

3 weeks ago

Selected Answer: A

Looks like A fits best.

upvoted 1 times

...