To identify the root cause of a security anomaly detected by GuardDuty (e.g., an EC2 instance making unusual API calls), you want a service that automatically correlates data from VPC Flow Logs, CloudTrail, and GuardDuty into a graph-based visualization. Which service should you use?

Direct Answer (Verified)Reviewed by Sunny (Senior Cloud Engineer)

Correct Answer: Amazon Detective

Detective makes it easy to investigate potential security issues by analyzing and visualizing traffic and account activity....

📋Part of AWS Certified DevOps Engineer – Professional (DOP-C02) · AWS Certification Practice
Real Exam ScenarioScenario Based

To identify the root cause of a security anomaly detected by GuardDuty (e.g., an EC2 instance making unusual API calls), you want a service that automatically correlates data from VPC Flow Logs, CloudTrail, and GuardDuty into a graph-based visualization. Which service should you use?

✓ Correct Answer & ExplanationScenario Based

Correct Answer

Amazon Detective

Why This Answer Is Correct

Detective makes it easy to investigate potential security issues by analyzing and visualizing traffic and account activity.

📚 What This Question Tests

This question evaluates your knowledge of Scenario Based — a core concept tested in AWS Certified DevOps Engineer – Professional (DOP-C02). Understanding Scenario Based is essential for designing scalable, secure, and cost-effective cloud architectures. Mastery of this topic will help you answer scenario-based questions confidently on exam day.