Exam AWS Certified Security - Specialty topic 1 question 65 discussion

I am pretty sure its B because you can add Trusted IP in Guard Duty https://docs.aws.amazon.com/guardduty/latest/ug/guardduty_upload_lists.html

Answer is B Trusted IP lists consist of IP addresses that you have whitelisted for secure communication with your AWS infrastructure and applications. GuardDuty does not generate findings for IP addresses on trusted IP lists. At any given time, you can have only one uploaded trusted IP list per AWS account per region. Threat lists consist of known malicious IP addresses. GuardDuty generates findings based on threat lists. At any given time, you can have up to six uploaded threat lists per AWS account per region. https://docs.aws.amazon.com/guardduty/latest/ug/guardduty_upload_lists.html Thanks polo

Answer is B

B https://docs.aws.amazon.com/guardduty/latest/ug/guardduty_upload-lists.html

https://docs.aws.amazon.com/guardduty/latest/ug/guardduty_upload-lists.html

AWS Inspecter has two types, neither of them involving 3rd party scanner

B because you can add Trusted IP in Guard Duty

Answer is B

Simply B

Its definetly B

B is my answer.

So... its B that seems to be more plausible, although "Elastic IP" puts me off a bit. However there is no any other answer as close to this. https://aws.amazon.com/premiumsupport/knowledge-center/guardduty-trusted-ip-list/

B is my answer.

while B is, indeed, plausible, here is a concern: "add the Elastic IP addresses to a trusted IP list in GuardDuty". Using: docs.aws.amazon.com/guardduty/latest/ug/findings_suppression-rule.html as a guidance, getting: "Recon:EC2/Portscan – Use a suppression rule to automatically archive findings when using a vulnerability assessment application. The suppression rule should consist of two filter criteria. The first criteria should use the Finding type attribute with a value of Recon:EC2/Portscan. The second filter criteria should match the instance or instances that host these vulnerability assessment tools. You can use either the Instance image ID attribute or the Tag value attribute". Nothing about Elastic IPs. Instead, use Tags or AMI arns. Any thoughts ?

Ans: B 100%

B is correct

Answer B. AWS Inspector is not used for IP filtering. Guard Duty does it.