GuardDuty Runtime Monitoring Quiz

What you'll be asked

1. Which AWS service is primarily responsible for monitoring for malicious or unauthorized behavior at the OS and container level within your EKS clusters and EC2 instances?
2. When configuring GuardDuty Runtime Monitoring for Amazon EKS, what is the primary purpose of the GuardDuty security agent?
3. Which of the following is a key benefit of using GuardDuty Runtime Monitoring compared to traditional CloudTrail-based event analysis?
4. You have enabled GuardDuty Runtime Monitoring for your EKS cluster, but you notice no runtime threats are being detected. What is the most likely cause?
5. An attacker has gained access to a container and is attempting to perform process injection. Which specific GuardDuty feature configuration is required to detect this attempt at the host/container interface?

Answers and explanations come after you submit.