SCS-C02 › Threat Detection and Incident Response

Threat Detection and Incident Response Practice Questions

This domain covers detecting and responding to security events across AWS accounts using GuardDuty, Security Hub, Inspector, CloudTrail, Detective, and EventBridge. Questions present an incident scenario and ask you to choose the most efficient, scalable detection or automated response using native AWS services and Organizations-level aggregation.