Amazon GuardDuty uses primarily:
Multiple choice — select one answer
Answer choices
Architectural breakdown & explanation
GuardDuty analyzes CloudTrail, VPC Flow Logs, and DNS logs for threats.
Correct answer(s): a. Threat detection based on logs and activity
Exam domain: Domain 2: Security and Compliance (30% weight on the official guide).
Official documentation & study links
Practice this certification
This page is one question from the AWS Certified Cloud Practitioner bank. Run a full timed practice exam with domain-weighted random questions in your browser.