SCS-C02 Question #441: Real Exam Question with Answer & Explanation

Question

A company runs its microservices architecture in Kubernetes containers on AWS by using Amazon Elastic Kubernetes Service (Amazon EKS) and Amazon Aurora The company has an organization in AWS Organizations to manage hundreds of AWS accounts that host different microservices. The company needs to implement a monitoring solution for logs from all AWS resources across all accounts. The solution must include automatic detection of security-related issues. Which solution will meet these requirements with the LEAST operational effort?

Options

• ADesignate an Amazon GuardDuty administrator account in the organization's management
• BDesignate a monitoring account. Share Amazon CloudWatch logs from all accounts with the
• CCreate a central Amazon S3 bucket in the organization's management account. Configure AWS
• DDesignate a monitoring account. Share Amazon CloudWatch logs from all accounts with the

Explanation

Amazon GuardDuty is a managed threat detection service that provides security monitoring for AWS accounts and resources, including Amazon EKS and Amazon RDS (Aurora) environments, with built-in capabilities for detecting security-related issues. By designating a GuardDuty administrator account and enabling GuardDuty for all accounts in the organization, the company can achieve centralized, automated threat detection with minimal operational overhead. Enabling EKS Protection and RDS Protection in GuardDuty specifically covers security threats for Kubernetes and Aurora databases, aligning perfectly with the company's architecture and

No community discussion yet for this question.