Practice · AWS Certified Security

~/aws-scs-c03 · aws-scs-c03_d1_6638f3edeb28 ▊

← AWS Certified Security - Specialty · practice sheet

aws-scs-c03_d1_6638f3edeb28 domain/d1 · medium single

A security team enables Amazon GuardDuty in a Region but does not enable any additional protection plans. Which attack sequence detection can GuardDuty still perform using only foundational data sources?

A Detection of cryptomining processes running inside EKS containers
B Detection of data exfiltration from an S3 bucket after the bucket becomes overly permissive
C Detection of an attack sequence starting from IAM privilege discovery activity on Amazon S3 APIs, followed by S3 control plane alterations that make a bucket policy more permissive
D Detection of malicious runtime behavior within ECS Fargate containers

Unlock this exam to join the per-question discussion and vote on questions.

next question →