Under increased cybersecurity concerns, a company is deploying a near real-time intrusion detection system (IDS) solution. A system must be put in place as soon as possible. The architecture consists of many AWS accounts, and all results must be delivered to a central location. Which solution will meet this requirement, while minimizing downtime and costs?
A) Deploy a third-party vendor solution to perform deep packet inspection in a transit VPC.
B) Enable VPC Flow Logs on each VPC. Set up a stream of the flow logs to a central Amazon Elasticsearch cluster.
C) Enable Amazon Macie on each AWS account and configure central reporting.
D) Enable Amazon GuardDuty on each account as members of a central account.

Question

Quizplus · Accepted Answer

Amazon GuardDuty is a managed threat detection service that continuously monitors for malicious activity and unauthorized behavior. It can be enabled quickly across multiple AWS accounts and delivers findings to a central account, minimizing downtime and costs.

Under Increased Cybersecurity Concerns, a Company Is Deploying a near Real-Time