nerdexam
Amazon

SCS-C02 · Question #48

A company uses AWS Organizations and has production workloads across multiple AWS accounts. A security engineer needs to design a solution that will proactively monitor for suspicious behavior…

The correct answer is C. Activate Amazon GuardDuty in each production account. In a dedicated logging account. https://aws.amazon.com/blogs/security/how-to-manage-amazon-guardduty-security-findings- across-multiple-accounts/ https://repost.aws/knowledge-center/guardduty-eventbridge-sns-rule

Submitted by lukas.cz· Mar 6, 2026Threat Detection and Incident Response

Question

A company uses AWS Organizations and has production workloads across multiple AWS accounts. A security engineer needs to design a solution that will proactively monitor for suspicious behavior across all the accounts that contain production workloads. The solution must automate remediation of incidents across the production accounts. The solution also must publish a notification to an Amazon Simple Notification Service (Amazon SNS) topic when a critical security finding is detected. In addition, the solution must send all security incident logs to a dedicated account. Which solution will meet these requirements?

Options

  • AActivate Amazon GuardDuty in each production account. In a dedicated logging account,
  • BActivate AWS Security Hub in each production account. In a dedicated logging account,
  • CActivate Amazon GuardDuty in each production account. In a dedicated logging account,
  • DActivate AWS Security Hub in each production account. In a dedicated logging account,

How the community answered

(22 responses)
  • A
    14% (3)
  • B
    9% (2)
  • C
    73% (16)
  • D
    5% (1)

Explanation

https://aws.amazon.com/blogs/security/how-to-manage-amazon-guardduty-security-findings- across-multiple-accounts/ https://repost.aws/knowledge-center/guardduty-eventbridge-sns-rule

Topics

#GuardDuty multi-account#centralized logging#automated remediation#SNS alerts

Community Discussion

No community discussion yet for this question.

Full SCS-C02 Practice