To satisfy regulatory reporting and compliance obligations is the correct answer. Tracking the evolving threat landscape is primarily driven by the need to understand attacker techniques and control weaknesses so that defenses, risk treatment, and response plans can be improved rather than primarily to meet compliance reporting requirements.

Monitoring threats helps teams discover new attack techniques and software weaknesses so that vulnerabilities can be remediated and detections can be created. It also directly informs how to prioritize security controls and which risks to treat first. Finally it supports incident handling and helps shorten recovery timelines by improving detection and response capabilities.

To discover new attack techniques and software weaknesses is incorrect because discovering new techniques and weaknesses is a central objective of threat landscape tracking. That information feeds vulnerability management and defensive updates.

To guide prioritization of security controls and risk treatment is incorrect because threat intelligence and landscape analysis are used to prioritize controls and to allocate resources where they reduce the most risk.

To support incident handling and shorten recovery timelines is incorrect because up to date threat knowledge improves incident detection and response and therefore shortens recovery time.

Full AWS Practitioner Certification Question