Exam AWS Certified Cloud Practitioner topic 1 question 280 discussion

https://medium.com/aws-architech/use-case-aws-inspector-vs-guardduty-3662bf80767a

D. Amazon GuardDuty "Amazon GuardDuty is a threat detection service that continuously monitors your AWS accounts and workloads for malicious activity and delivers detailed security findings for visibility and remediation." https://aws.amazon.com/guardduty/

Amazon GuardDuty is a threat detection service that continuously monitors the AWS account for malicious or unauthorized activities. It uses machine learning, anomaly detection, and integrated threat intelligence to identify potential security threats, such as unauthorized access, compromised instances, and data exfiltration. When suspicious activities are detected, GuardDuty generates security findings and provides actionable insights to help you remediate the threats. Additionally, GuardDuty can integrate with other AWS services, like AWS Lambda, to automate responses to security findings, enabling you to take immediate actions against threats.

Key word Threats = GuardDuty

D. Amazon GuardDuty

Agreed

D is the answer.

Agreed

: Can I take automated preventative actions using GuardDuty? With GuardDuty, CloudWatch Events, and AWS Lambda, you have the flexibility to set up automated remediation actions based on a security finding. For example, you can create a Lambda function to modify your AWS security group rules based on security findings. If you receive a GuardDuty finding indicating one of your EC2 instances is being probed by a known malicious IP, you can address it through a CloudWatch Events rule, initiating a Lambda function to automatically modify your security group rules and restrict access on that port.