Exam AWS Certified Security - Specialty topic 1 question 311 discussion

AD. Thank you!

The correct steps for configuring GuardDuty to exclude trusted IP addresses are: A. Create a plaintext configuration file that contains the trusted IP addresses. D. Upload the configuration file to Amazon S3. Add a new trusted IP list to GuardDuty that points to the file. GuardDuty allows you to exclude trusted IP addresses by creating a custom Trusted IP list. To create a list, you must first create a configuration file that contains the trusted IP addresses. The file can be either plaintext or JSON format. Then, upload the configuration file to an Amazon S3 bucket and create a Trusted IP list in GuardDuty that points to the file. This will ensure that GuardDuty does not generate findings for traffic originating from these trusted IP addresses.

B. D. The security engineer should create a JSON configuration file that contains the trusted IP addresses and upload it to Amazon S3. Then, the security engineer should add a new trusted IP list to GuardDuty that points to the file in S3. This will allow GuardDuty to reference the trusted IP addresses from the configuration file and not produce findings for these IP addresses.

Answer AD https://aws.amazon.com/premiumsupport/knowledge-center/guardduty-trusted-ip-list/

Just confirmed, options A and D are correct.

Json is not a supported format

A & D ok

A & D ok

Yes A and D https://docs.aws.amazon.com/guardduty/latest/ug/guardduty_upload-lists.html You can specify the location URL in the following formats: https://s3.amazonaws.com/bucket.name/file.txt https://s3-aws-region.amazonaws.com/bucket.name/file.txt http://bucket.s3.amazonaws.com/file.txt http://bucket.s3-aws-region.amazonaws.com/file.txt s3://bucket.name/file.txt

A. Create a plaintext configuration file that contains the trusted IP addresses. D. Upload the configuration file to Amazon S3. Add a new trusted IP list to GuardDuty that points to the file.

A & D Refer to https://docs.aws.amazon.com/guardduty/latest/ug/guardduty_upload-lists.html Create a plaintext file, place it into a bucket and refer it in the guardduty trusted-ip config

A & D. While updating the IP list, it asks for a location i.e., S3 path and the file format. the valid values are plaintext, CSV.

Answer is A and D. We need to create a plaintext file with the IP addresses and upload it to S3. Then, pass the s3 url in the GuardDuty Trusted IP List

B & D...............