Exam NSE7_PBC-6.4 topic 1 question 3 discussion

B You must subscribe to GuardDuty, CloudWatch, S3, and DynamoDB. https://docs.fortinet.com/document/fortigate-public-cloud/6.4.0/aws-administration-guide/908646/populating-threat-feeds-with-guardduty

"GuardDuty, CloudWatch, S3, and DynamoDB." https://docs.fortinet.com/document/fortigate-public-cloud/6.4.0/aws-administration-guide/908646/populating-threat-feeds-with-guardduty

https://docs.fortinet.com/document/fortigate-public-cloud/6.4.0/aws-administration-guide/908646/populating-threat-feeds-with-guardduty

Ans. B AWS GuardDuty is a managed threat detection service that monitors malicious or unauthorized behaviors/activities related to AWS resources. GuardDuty provides visibility of logs called "findings", and Fortinet provides a Lambda script called "aws-lambda-guardduty", which translates feeds from AWS GuardDuty findings into a list of malicious IP addresses in an S3 location, which a FortiGate-VM can consume as an external threat feed after being configured to point to the list's URL. To use this feature, you must subscribe to "GuardDuty, CloudWatch, S3, and DynamoDB." https://docs.fortinet.com/document/fortigate-public-cloud/6.4.0/aws-administration-guide/908646/populating-threat-feeds-with-guardduty

A. GuardDuty, CloudWatch, S3, Inspector, WAF, and Shield. Explanation/Reference: Reference: https://fortinetweb.s3.amazonaws.com/docs.fortinet.com/v2/attachments/ed901ad2-4424-11e9-94bf-00505692583a/FortiOS_6.2.0_AWS_Cookbook.pdf

https://docs.fortinet.com/document/fortigate-public-cloud/7.0.0/aws-administration-guide/908646/populating-threat-feeds-with-guardduty To use this feature, you must subscribe to GuardDuty, CloudWatch, S3, and DynamoDB.