AWS Certified Security - Specialty SCS-C02 — Topic 1 Question 272

Question

A company uses Amazon Elastic Kubernetes Service (Amazon EKS) clusters to run its Kubernetes-based applications. The company uses Amazon GuardDuty to protect the applications. EKS Protection is enabled in GuardDuty. However, the corresponding GuardDuty feature is not monitoring the Kubernetes-based applications. Which solution will cause GuardDuty to monitor the Kubernetes-based applications?

Accepted Answer

Correct answer: D. The correct answer is D. Option D: Enable the control plane logs in Amazon EKS. Ensure that the logs are ingested into Amazon CloudWatch. Amazon EKS runs managed Kubernetes when you need the Kubernetes ecosystem. Amazon CloudWatch collects metrics, logs and alarms to monitor and react to operational health.

AWS Certified Security - Specialty SCS-C02 — Question 272