Question 13
Domain 2: Security Logging and MonitoringAn AWS security team wants to track operational metrics against established baselines so it can identify unusual activity over time. Which AWS tool is specifically listed as an example of a tool that monitors metrics and baselines?
Correct answer: A
Explanation
When selecting AWS monitoring tools for security operations, recognize that GuardDuty and Systems Manager are examples specifically identified for monitoring metrics and baselines. — AWS-Certified-Security-Specialty_Exam-Guide.txt
Why each option is right or wrong
A. Amazon GuardDuty
The source material for tools that monitor metrics and baselines explicitly lists GuardDuty as an example, so it fits the team's stated need.
B. AWS Artifact
Artifact provides access to compliance reports and agreements, not monitoring metrics and baselines.
C. AWS Shield
Shield focuses on DDoS protection, not the source-listed function of monitoring metrics and baselines.
D. AWS Organizations
Organizations manages multi-account governance, not monitoring metrics and baselines.