Match each AWS security tool to its purpose.
Drag a concept onto its matching description — or click a concept then click the description.
Automated vulnerability assessment
Threat detection service
Centralized security findings aggregation
Investigation and analysis of security issues
Resource configuration monitoring and compliance
Answer choices
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
AWS Shield: Protects against DDoS attacks
Correct matches: AWS Shield protects against DDoS, AWS WAF filters web traffic, and GuardDuty provides threat detection. Common confusions include swapping Shield with WAF and Inspector with Macie.
Answer analysis
For each option: why learners choose it and why it is or isn't the right answer here.
AWS Shield: Protects against DDoS attacks
Why this is correct
AWS Shield is a managed DDoS protection service that safeguards applications running on AWS.
AWS WAF: Filters web traffic using rules
Why this is correct
AWS WAF is a web application firewall that helps protect web applications from common web exploits.
AWS GuardDuty: Provides intelligent threat detection
Why this is correct
Amazon GuardDuty is a threat detection service that continuously monitors for malicious activity.
AWS Inspector: Protects against DDoS attacks
Why it's wrong here
Incorrect — this describes AWS Shield. Amazon Inspector is an automated vulnerability assessment service.
AWS Macie: Automates vulnerability assessments
Why it's wrong here
Incorrect — this describes Amazon Inspector. Amazon Macie is a data security service that uses ML to discover sensitive data.
Go deeper
About these practice questions
This SCS-C02 question is part of Courseiva's 376-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This SCS-C02 practice question is part of Courseiva's free Amazon Web Services certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SCS-C02 exam.