Amazon GuardDuty Configuration Quiz

What you'll be asked

1. Which AWS service does Amazon GuardDuty primarily use to ingest data for threat detection?
2. You want to ensure that GuardDuty automatically covers all new AWS accounts created within your AWS Organization. Which configuration should you use?
3. A security analyst needs to prevent GuardDuty from flagging activity from a known, trusted third-party security scanner. What feature should they use?
4. If you need to automatically trigger a Lambda function whenever a high-severity GuardDuty finding is generated, what is the best practice architecture?
5. An organization requires that GuardDuty findings be aggregated into a central security account. Which configuration is required to achieve this?

Answers and explanations come after you submit.