nerdexam
Amazon

SCS-C02 · Question #193

A security engineer must Implement monitoring of a company's Amazon Aurora MySQL DB instances. The company wants to receive email notifications when unknown users try to log in to the database…

The correct answer is A. Enable Amazon GuardDuty. Enable the Amazon RDS Protection feature in GuardDuty to detect. https://docs.aws.amazon.com/guardduty/latest/ug/rds-protection.html

Submitted by femi9· Mar 6, 2026Threat Detection and Incident Response

Question

A security engineer must Implement monitoring of a company's Amazon Aurora MySQL DB instances. The company wants to receive email notifications when unknown users try to log in to the database endpoint. Which solution will meet these requirements with the LEAST operational overhead?

Options

  • AEnable Amazon GuardDuty. Enable the Amazon RDS Protection feature in GuardDuty to detect
  • BEnable the server_audit_logglng parameter on the Aurora MySQL DB instances. Use AWS
  • CCreate an Amazon RDS Custom AMI. Include a third-party security agent in the AMI to detect
  • DWrite a stored procedure to detect login attempts by unknown users. Schedule a recurring job

How the community answered

(24 responses)
  • A
    75% (18)
  • B
    4% (1)
  • C
    8% (2)
  • D
    13% (3)

Explanation

https://docs.aws.amazon.com/guardduty/latest/ug/rds-protection.html

Topics

#GuardDuty RDS Protection#Aurora MySQL#login monitoring#threat detection

Community Discussion

No community discussion yet for this question.

Full SCS-C02 Practice