AWS Certified Security - Specialty SCS-C02 — Topic 1 Question 90

Question

A company's security engineer is developing an incident response plan to detect suspicious activity in an AWS account for VPC hosted resources. The security engineer needs to provide visibility for as many AWS Regions as possible. Which combination of steps will meet these requirements MOST cost-effectively? (Choose two.)

Accepted Answer

Correct answer: B, D. The correct answer is B, D. Option B: Activate Amazon GuardDuty across all AWS Regions. Option D: Create an Amazon Simple Notification Service (Amazon SNS) topic. Create an Amazon EventBridge rule that responds to findings and publishes the findings to the SNS topic. Amazon SNS is a managed pub/sub service for fan-out notifications to many subscribers. Amazon EventBridge routes events between services with rules, enabling event-driven, decoupled architectures. Amazon GuardDuty continuously monitors for threats and malicious activity. This option delivers the requirement at the lowest cost.

AWS Certified Security - Specialty SCS-C02 — Question 90