Which TWO AWS services provide threat detection and API-activity auditing across an AWS account? (Select TWO.)
Choose 2 answers.
A.Amazon GuardDuty for intelligent threat detection
Correct. GuardDuty is AWS's managed threat-detection service.
B.AWS CloudTrail for API activity logging and auditing
Correct. CloudTrail logs every API call — the foundation of AWS auditing.
C.AWS WAF for blocking web exploits
WAF blocks malicious web requests; it's a preventive filter, not detection/auditing.
D.Amazon CloudWatch for metrics dashboards
CloudWatch collects metrics/logs; it does not analyze for threats.
E.AWS Artifact for compliance reports
Artifact provides compliance documentation, not account monitoring.
Why this answer
GuardDuty analyzes CloudTrail events, DNS logs, and other sources to detect threats continuously. CloudTrail records API calls for auditing. Together they provide detection plus audit trail — the detection layer of defense-in-depth.
Correct answers: A, B · Last reviewed 2026-10-25
Official AWS references
Practice this interactively
Answer without seeing the solution first in the Data Protection & Encryption practice session.
Practice Data Protection & Encryption