CLF-C02 Question 65

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• Chose C1

  To monitor for misconfigured security groups allowing unrestricted access to specific ports, a company can utilize AWS GuardDuty. GuardDuty is a threat detection service that continuously monitors for malicious activity and unauthorized behavior, including misconfigured security groups.

• Chose A2

  The correct answer is: A. AWS Trusted Advisor AWS Trusted Advisor provides real-time guidance to help provision your resources following AWS best practices. It includes a security check that identifies security groups with rules that allow unrestricted access (0.0.0.0/0) to specific ports, which could pose a security risk. This service helps you monitor and remediate misconfigured security groups. Why not the others? B. Amazon CloudWatch: CloudWatch is used for monitoring and observability, such as collecting logs, metrics, and setting alarms. It does not specifically identify misconfigured security groups. C. Amazon GuardDuty: GuardDuty is a threat detection service that uses machine learning to identify malicious activity or unauthorized behavior. It does not focus on identifying misconfigured security groups. D. AWS Health Dashboard: This service provides information about the health of AWS services and resources, but it does not monitor for misconfigured security groups.

• Chose C2

  The correct answer is C. Amazon GuardDuty. Amazon GuardDuty is a threat detection service that monitors AWS accounts and resources for malicious activity. It can detect misconfigured security groups that allow unrestricted access to specific ports, among other security issues.