Which AWS service audits device configurations, monitors connected devices to detect abnormal behavior, and mitigates security risks?

• A. AWS IoT Device Defender
• B. AWS IoT Core
• C. AWS IoT Device Management
• D. Amazon Pinpoint

Answer: (A)

The main concept here is IoT security governance for a fleet of devices. AWS IoT Device Defender is designed to scrutinize how devices are configured and how they behave in the field to find and reduce security risks. It continuously audits device configurations against security best practices and required policies, so you can detect deviations such as misconfigured certificates, improper policy attachments, or weak security settings.

It also monitors device telemetry and behavior to spot abnormal activity, such as unusual message rates, destinations, or patterns that don’t match expected norms. When security issues or anomalies are detected, the service surfaces findings and supports mitigation actions to address the risks—this can include triggering policy updates, rotating credentials, or quarantining or isolating problematic devices, and sending alerts to keep teams informed.

Other services in the IoT suite focus on different areas: IoT Core handles secure device communication and data routing; IoT Device Management supports provisioning, grouping, and fleet operations; Pinpoint is for customer messaging and analytics. None of these provide the combined capability to audit configurations, continuously monitor for anomalies, and automatically help mitigate security risks in an IoT fleet like Device Defender.