Eccouncil Exam 312-40 Topic 6 Question 9 Discussion

Actual exam question for Eccouncil's 312-40 exam

Question #: 9
Topic #: 6

Billy Pratt works as a cloud security engineer in an MNC. In 2012, his organization transferred all applications and data into an AWS cloud environment. Billy would like to analyze, investigate, and identify the root cause of malicious activities in his organization's AWS cloud environment. Which of the following Amazon services automatically collects data from various AWS resources and utilizes machine learning, statistical analysis, and graph theory to provide a unified and interactive view of resources and users that would help Billy in determining the root cause of suspicious activities?

AAmazon inspector

BAmazon Detective

CAmazon Guard Duty

DAmazon Macie

Show Suggested Answer

Suggested Answer: C

To investigate the errors reported by customers during the payment process on their website, the cloud forensic team at ShopZone should examine the Platform logs in GCP.

1.Platform Logs: These are service-specific logs that can help debug and troubleshoot issues related to Google Cloud services. Since the payment processing system is likely integrated with various GCP services, platform logs will contain information about the operations and interactions of these services1.

1.Relevance to Payment Processing System: Platform logs will include detailed records of all activities and operations that occur within the GCP services used by the payment processing system. This can help identify any anomalies or errors that may be disrupting the payment process.

1.Investigation Process:

oAccess the Cloud Logging section in the GCP Console.

oFilter the logs by the specific services involved in the payment processing system.

oLook for error messages, failed transactions, or any unusual activity that could indicate a problem.

Google Cloud Documentation: Understanding and managing platform logs1.

Google Cloud Blog: Best practices for operating containers2.

by Alica at Jul 09, 2024, 05:49 AM

Limited Time Offer

25%

Off

Get Premium 312-40 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Leonida

2 hours ago

I think Detective is the way to go. It uses machine learning and statistical analysis to give you a unified view of your resources and users. Perfect for getting to the bottom of any malicious activities.

upvoted 0 times

...

Chery

2 days ago

Amazon Detective seems to be the correct answer here. It's specifically designed to investigate and identify the root cause of suspicious activities in the AWS cloud environment.

upvoted 0 times

...

Wava

7 days ago

I agree with you, German. Amazon Detective sounds like the right choice for Billy to analyze malicious activities.

upvoted 0 times

...

German

12 days ago

I think the answer is Amazon Detective because it uses machine learning and statistical analysis.

upvoted 0 times

...