GuardDuty and Threat Detection Quiz

What you'll be asked

1. What is the primary function of Amazon GuardDuty in a cloud security architecture?
2. You need to ensure that GuardDuty is enabled across all current and future accounts in your AWS Organization. What is the most efficient way to achieve this?
3. A security analyst receives a GuardDuty alert indicating 'UnauthorizedAccess:IAMUser/MaliciousIPCaller.Custom'. What does this specific finding type indicate?
4. If you want to integrate GuardDuty findings with a SIEM or a ticketing system like Jira, what is the recommended architectural pattern?
5. You have a high-traffic environment and are concerned about GuardDuty costs. You want to stop GuardDuty from monitoring specific S3 buckets that contain only public, non-sensitive data. How do you implement this?

Answers and explanations come after you submit.