Câu 54: 312-39V2: Certified SOC Analyst (CSA) v2

SecureTech Inc., a leading cybersecurity-focused organization, operates its critical infrastructure and applications in AWS. The Security Operations Center (SOC) team is responsible for detecting, investigating, and mitigating security threats within their cloud environment. Recently, the SOC team has observed an increase in suspicious activities, such as unexpected API calls, unusual outbound traffic from instances, and DNS requests to potentially malicious domains. To enhance their threat detection capabilities, they need a fully managed AWS security service that can continuously monitor for malicious activity across their AWS environment, analyze AWS CloudTrail logs, VPC Flow Logs, and DNS query logs, leverage machine learning and threat intelligence to identify advanced threats, and provide actionable security findings to accelerate response efforts. Which AWS service is best suited to help SecureTech Inc. proactively detect and respond to security threats in their AWS environment?

1. A. AWS Config
2. B. Amazon GuardDuty — đáp án hiện tại
3. C. AWS Security Hub
4. D. Amazon Macie