A company wants to implement threat detection on its AWS (CLF-C02)

Correct answer: C) Amazon GuardDuty.
Amazon GuardDuty is a threat detection service that continuously monitors for malicious activity and unauthorized behavior in your AWS environment. It analyzes VPC flow logs, AWS CloudTrail event logs, and DNS logs for potential threats. GuardDuty uses machine learning algorithms and threat intelligence to identify anomalies and suspicious activities, such as unusual API calls or unexpected network traffic patterns, without requiring any additional software deployment.