SCS-C02 Domain 2: Incident Response

Operations reports a need to integrate threat intel feeds. What is the MOST operationally efficient solution? integrate threat intel feeds.

Multiple choice — select one answer

Answer choices

  1. a. Isolate instance and snapshot volumes
  2. b. Game days and FIS experiments
  3. c. GuardDuty threat lists and partner integrations
  4. d. SSM Automation and Security Hub custom actions

Architectural breakdown & explanation

Threat intel improves detection.

Correct answer(s): c. GuardDuty threat lists and partner integrations

Exam domain: Domain 2: Incident Response (14% weight on the official guide).

Official documentation & study links

Practice this certification

This page is one question from the AWS Certified Security – Specialty bank. Run a full timed practice exam with domain-weighted random questions in your browser.