nerdexam
Amazon

CLF-C02 · Question #667

Which AWS service continuously monitors AWS accounts and workloads for malicious or unauthorized actions?

The correct answer is B. Amazon GuardDuty. Amazon GuardDuty is a threat detection service that continuously monitors AWS accounts and workloads for malicious or unauthorized activities. It analyzes data from multiple sources, such as AWS CloudTrail, VPC Flow Logs, and DNS logs, to identify potential threats like account c

Submitted by cyberguy42· Mar 6, 2026Security and Compliance

Question

Which AWS service continuously monitors AWS accounts and workloads for malicious or unauthorized actions?

Options

  • AAmazon CloudWatch
  • BAmazon GuardDuty
  • CAWS Shield
  • DAWS WAF

How the community answered

(32 responses)
  • B
    94% (30)
  • C
    3% (1)
  • D
    3% (1)

Explanation

Amazon GuardDuty is a threat detection service that continuously monitors AWS accounts and workloads for malicious or unauthorized activities. It analyzes data from multiple sources, such as AWS CloudTrail, VPC Flow Logs, and DNS logs, to identify potential threats like account compromise, anomalous behavior, or unauthorized actions. GuardDuty provides actionable security findings to help protect your AWS environment.

Community Discussion

No community discussion yet for this question.

Full CLF-C02 Practice