Bird
0
0

What could be a misconfiguration causing this?

medium📝 Debug Q7 of 15
AWS - Advanced Security
You have set up GuardDuty with a delegated administrator account to monitor multiple AWS member accounts. Some member accounts are not reporting findings. What could be a misconfiguration causing this?
AGuardDuty requires manual activation on the delegated administrator account
BGuardDuty is not supported in the AWS region where member accounts reside
CThe delegated administrator account does not have billing permissions
DMember accounts have not accepted the invitation to be monitored by the delegated administrator
Step-by-Step Solution
Solution:
  1. Step 1: Understand GuardDuty multi-account setup

    Member accounts must accept the invitation from the delegated administrator to send findings.
  2. Step 2: Identify common misconfigurations

    If invitations are not accepted, member accounts won't report findings despite being linked.
  3. Final Answer:

    Member accounts have not accepted the invitation to be monitored by the delegated administrator -> Option D
  4. Quick Check:

    Member accounts must accept GuardDuty invitations to send findings [OK]
Quick Trick: Member accounts must accept GuardDuty invitations to report findings [OK]
Common Mistakes:
  • Assuming billing permissions affect findings reporting
  • Believing GuardDuty is unsupported in certain regions without verification
  • Thinking delegated admin requires manual activation

Want More Practice?

15+ quiz questions · All difficulty levels · Free

Free Signup - Practice All Questions
More AWS Quizzes