Exam AWS Certified Cloud Practitioner topic 1 question 362 discussion

C. Amazon GuardDuty ""Amazon GuardDuty is a threat detection service that continuously monitors your AWS accounts and workloads for malicious activity and delivers detailed security findings for visibility and remediation. Continuously monitor your AWS accounts, instances, serverless and container workloads, users, databases, and storage for potential threats." https://aws.amazon.com/guardduty/

C is correct

The AWS service that the system administrator should use to identify who terminated an Amazon EC2 instance in their AWS account is AWS CloudTrail.

C is the answer.

C. Amazon GuardDuty Amazon GuardDuty is a fully managed threat detection service that continuously monitors for malicious activity and unauthorized behavior in AWS accounts. It uses machine learning, threat intelligence, and integrated AWS security services to identify and prioritize potential threats, and it provides detailed threat findings that include the source IP address, the type of event, and the level of risk. You can use the findings to investigate and respond to any detected threats and also you can use GuardDuty to protect your workloads, applications, and data, both in the cloud and on premises. It continuously monitors your AWS accounts, providing a real-time view of security events, and it integrates with other AWS security services such as Amazon CloudWatch, Amazon SNS, and AWS Security Hub to help you quickly detect and respond to threats.

Answer: C https://aws.amazon.com/guardduty/

Answer: C