Eccouncil Exam 312-40 Topic 6 Question 9 Discussion

Actual exam question for Eccouncil's 312-40 exam

Question #: 9
Topic #: 6

Billy Pratt works as a cloud security engineer in an MNC. In 2012, his organization transferred all applications and data into an AWS cloud environment. Billy would like to analyze, investigate, and identify the root cause of malicious activities in his organization's AWS cloud environment. Which of the following Amazon services automatically collects data from various AWS resources and utilizes machine learning, statistical analysis, and graph theory to provide a unified and interactive view of resources and users that would help Billy in determining the root cause of suspicious activities?

AAmazon inspector

BAmazon Detective

CAmazon Guard Duty

DAmazon Macie

Show Suggested Answer

Suggested Answer: C

To investigate the errors reported by customers during the payment process on their website, the cloud forensic team at ShopZone should examine the Platform logs in GCP.

1.Platform Logs: These are service-specific logs that can help debug and troubleshoot issues related to Google Cloud services. Since the payment processing system is likely integrated with various GCP services, platform logs will contain information about the operations and interactions of these services1.

1.Relevance to Payment Processing System: Platform logs will include detailed records of all activities and operations that occur within the GCP services used by the payment processing system. This can help identify any anomalies or errors that may be disrupting the payment process.

1.Investigation Process:

oAccess the Cloud Logging section in the GCP Console.

oFilter the logs by the specific services involved in the payment processing system.

oLook for error messages, failed transactions, or any unusual activity that could indicate a problem.

Google Cloud Documentation: Understanding and managing platform logs1.

Google Cloud Blog: Best practices for operating containers2.

by Alica at Jul 09, 2024, 05:49 AM

Limited Time Offer

25%

Off

Get Premium 312-40 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Jani

1 months ago

Definitely going with Detective on this one. It's like having a private investigator for your AWS cloud, and who doesn't love a good mystery-solving session?

upvoted 0 times

Thora

3 days ago

I think Amazon Guard Duty could also be helpful in identifying potential security threats in the cloud environment.

upvoted 0 times

...

Myong

23 days ago

I agree, Amazon Detective sounds like the perfect tool for investigating suspicious activities in the AWS cloud.

upvoted 0 times

...

Ronny

1 months ago

I'm not sure, but I think Amazon Guard Duty also collects data and could help Billy in identifying suspicious activities.

upvoted 0 times

...

Winfred

2 months ago

I agree with you, Jackie. Amazon Detective sounds like the right choice for Billy to analyze malicious activities.

upvoted 0 times

...

Jackie

2 months ago

I think the answer is Amazon Detective because it uses machine learning and statistical analysis.

upvoted 0 times

...

Avery

2 months ago

I'm not sure, but I think Amazon Guard Duty also collects data and could help Billy in identifying suspicious activities.

upvoted 0 times

...

Aleisha

2 months ago

Haha, I bet Billy's been spending a lot of time in the AWS console lately, trying to figure this out. Good thing Amazon Detective is there to lend a hand!

upvoted 0 times

Chara

28 days ago

User 2: Definitely! It uses machine learning and statistical analysis to provide a unified view of resources and users.

upvoted 0 times

...

Yuette

1 months ago

User 1: Yeah, Amazon Detective is a lifesaver for analyzing suspicious activities.

upvoted 0 times

...

Leonida

2 months ago

I think Detective is the way to go. It uses machine learning and statistical analysis to give you a unified view of your resources and users. Perfect for getting to the bottom of any malicious activities.

upvoted 0 times

...

Chery

2 months ago

Amazon Detective seems to be the correct answer here. It's specifically designed to investigate and identify the root cause of suspicious activities in the AWS cloud environment.

upvoted 0 times