nerdexam
Amazon

CLF-C02 · Question #649

A company needs to continuously monitor its environment to analyze network and account activity and identify potential security threats. Which AWS service should the company use to meet these requirem

The correct answer is D. Amazon GuardDuty. Amazon GuardDuty is a threat detection service that continuously monitors your AWS environment for malicious or unauthorized activity. It analyzes data such as VPC flow logs, DNS logs, and CloudTrail event logs to identify potential security threats, including anomalous behavior,

Submitted by certguy· Mar 6, 2026Security and Compliance

Question

A company needs to continuously monitor its environment to analyze network and account activity and identify potential security threats. Which AWS service should the company use to meet these requirements?

Options

  • AAWS Artifact
  • BAmazon Macie
  • CAWS Identity and Access Management (IAM)
  • DAmazon GuardDuty

How the community answered

(35 responses)
  • A
    3% (1)
  • B
    3% (1)
  • C
    6% (2)
  • D
    89% (31)

Explanation

Amazon GuardDuty is a threat detection service that continuously monitors your AWS environment for malicious or unauthorized activity. It analyzes data such as VPC flow logs, DNS logs, and CloudTrail event logs to identify potential security threats, including anomalous behavior, unauthorized access, or network intrusions.

Community Discussion

No community discussion yet for this question.

Full CLF-C02 Practice