nerdexam
AmazonAmazon

SCS-C02 · Question #225

SCS-C02 Question #225: Real Exam Question with Answer & Explanation

Sign in or unlock SCS-C02 to reveal the answer and full explanation for question #225. The question stem and answer options stay visible for context.

Submitted by kevin_r· Mar 6, 2026Security Logging and Monitoring

Question

A company uses Amazon Elastic Kubernetes Service (Amazon EKS) clusters to run its Kubernetes-based applications. The company uses Amazon GuardDuty to protect the applications. EKS Protection is enabled in GuardDuty. However, the corresponding GuardDuty feature is not monitoring the Kubernetes-based applications. Which solution will cause GuardDuty to monitor the Kubernetes-based applications?

Options

  • AEnable VPC flow logs for the VPC that hosts the EKS clusters.
  • BAssign the CloudWatchEventsFullAccess AWS managed policy to the EKS clusters.
  • CEnsure that the AmazonGuardDutyFullAccess AWS managed policy is attached to the GuardDuty
  • DEnable the control plane logs in Amazon EKS. Ensure that the logs are ingested into Amazon

Unlock SCS-C02 to see the answer

You've previewed enough free SCS-C02 questions. Unlock SCS-C02 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.

Topics

#GuardDuty EKS Protection#EKS Control Plane Logs#Security Monitoring#Threat Detection
Full SCS-C02 PracticeBrowse All SCS-C02 Questions