Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

Eccouncil Exam 312-40 Topic 6 Question 9 Discussion

Actual exam question for Eccouncil's 312-40 exam
Question #: 9
Topic #: 6
[All 312-40 Questions]

Billy Pratt works as a cloud security engineer in an MNC. In 2012, his organization transferred all applications and data into an AWS cloud environment. Billy would like to analyze, investigate, and identify the root cause of malicious activities in his organization's AWS cloud environment. Which of the following Amazon services automatically collects data from various AWS resources and utilizes machine learning, statistical analysis, and graph theory to provide a unified and interactive view of resources and users that would help Billy in determining the root cause of suspicious activities?

Show Suggested Answer Hide Answer
Suggested Answer: C

To investigate the errors reported by customers during the payment process on their website, the cloud forensic team at ShopZone should examine the Platform logs in GCP.

1.Platform Logs: These are service-specific logs that can help debug and troubleshoot issues related to Google Cloud services. Since the payment processing system is likely integrated with various GCP services, platform logs will contain information about the operations and interactions of these services1.

1.Relevance to Payment Processing System: Platform logs will include detailed records of all activities and operations that occur within the GCP services used by the payment processing system. This can help identify any anomalies or errors that may be disrupting the payment process.

1.Investigation Process:

oAccess the Cloud Logging section in the GCP Console.

oFilter the logs by the specific services involved in the payment processing system.

oLook for error messages, failed transactions, or any unusual activity that could indicate a problem.


Google Cloud Documentation: Understanding and managing platform logs1.

Google Cloud Blog: Best practices for operating containers2.

Contribute your Thoughts:

Jani
5 days ago
Definitely going with Detective on this one. It's like having a private investigator for your AWS cloud, and who doesn't love a good mystery-solving session?
upvoted 0 times
...
Ronny
6 days ago
I'm not sure, but I think Amazon Guard Duty also collects data and could help Billy in identifying suspicious activities.
upvoted 0 times
...
Winfred
7 days ago
I agree with you, Jackie. Amazon Detective sounds like the right choice for Billy to analyze malicious activities.
upvoted 0 times
...
Jackie
8 days ago
I think the answer is Amazon Detective because it uses machine learning and statistical analysis.
upvoted 0 times
...
Avery
10 days ago
I'm not sure, but I think Amazon Guard Duty also collects data and could help Billy in identifying suspicious activities.
upvoted 0 times
...
Aleisha
11 days ago
Haha, I bet Billy's been spending a lot of time in the AWS console lately, trying to figure this out. Good thing Amazon Detective is there to lend a hand!
upvoted 0 times
...
Leonida
13 days ago
I think Detective is the way to go. It uses machine learning and statistical analysis to give you a unified view of your resources and users. Perfect for getting to the bottom of any malicious activities.
upvoted 0 times
...
Chery
15 days ago
Amazon Detective seems to be the correct answer here. It's specifically designed to investigate and identify the root cause of suspicious activities in the AWS cloud environment.
upvoted 0 times
...
Wava
20 days ago
I agree with you, German. Amazon Detective sounds like the right choice for Billy to analyze malicious activities.
upvoted 0 times
...
German
25 days ago
I think the answer is Amazon Detective because it uses machine learning and statistical analysis.
upvoted 0 times
...

Save Cancel
az-700  pass4success  az-104  200-301  200-201  cissp  350-401  350-201  350-501  350-601  350-801  350-901  az-720  az-305  pl-300  

Warning: Cannot modify header information - headers already sent by (output started at /pass.php:70) in /pass.php on line 77