Topic 1 Question 90

AWS Certified Security - Specialty

Topic 1 Question 90
A company's security engineer is developing an incident response plan to detect suspicious activity in an AWS account for VPC hosted resources. The security engineer needs to provide visibility for as many AWS Regions as possible.

Which combination of steps will meet these requirements MOST cost-effectively?

2 つ選択
- Turn on VPC Flow Logs for all VPCs in the account.
- Activate Amazon GuardDuty across all AWS Regions.
- Activate Amazon Detective across all AWS Regions.
- Create an Amazon Simple Notification Service (Amazon SNS) topic. Create an Amazon EventBridge rule that responds to findings and publishes the findings to the SNS topic.
- Create an AWS Lambda function. Create an Amazon EventBridge rule that invokes the Lambda function to publish findings to Amazon Simple Email Service (Amazon SES).
ユーザの投票
コメント(12)
- 正解だと思う選択肢: BD
  BD are the correct options here. The keywords here are "developing an incident response plan to detect suspicious activity". There is no better way to develop incident response plan without providing a way for the relevant stakeholders to take actions or respond to suspicious activities.
  
  B is an obvious option because GuardDuty can monitor and analyze API calls across all AWS Regions, and network activities found in Amazon CloudTrail Events, Amazon VPC Flow Logs, and DNS Logs. Therefore, option A is not needed since GuardDuty monitoring activities include the VPC Flow Logs.
  
  There is no better way to respond to the findings generated by GuardDuty than the services described in option D.
  
  👍 9
  AgboolaKun2023/11/27
- 正解だと思う選択肢: AB
  A and B are correct for sure. The question does not mention anything about "notifications" or "communications", so D is incorrect. A is correct because the question mentions visibility and detection. You get visibility into network traffic with VPC flow logs. B is correct because because we need to "detection" threats. GaurdDuty is a threat detection capability.
  
  👍 5
  navid13652024/05/16
- 正解だと思う選択肢: BD
  GuardDuty analyzes VPC flow logs regardless of if you have turned them on or not
  
  👍 3
  lightrod2024/02/08
シャッフルモード

ユーザの投票

コメント(12)