Examkin

Question

Difficulty: MediumThreat Detection and Vulnerability Management

A digital marketing agency needs to implement security measures for its AWS infrastructure. The agency wants to continuously monitor its AWS accounts for unauthorized behavior and malicious activity. Additionally, they need to scan their Amazon Elastic Container Registry (Amazon ECR) container images for software vulnerabilities. Which two AWS services should the agency use to meet these requirements? (Select two.)

  1. Amazon GuardDutyAnswer
  2. Amazon InspectorAnswer
  3. C
    AWS CloudTrail
  4. D
    Amazon CloudWatch
  5. E
    AWS Shield

Answer

Amazon GuardDuty and Amazon Inspector are the correct services. Amazon GuardDuty provides continuous threat detection by analyzing logs for malicious behavior, while Amazon Inspector scans container images in Amazon ECR for software vulnerabilities.
Amazon GuardDuty and Amazon Inspector are the appropriate AWS services for threat detection and vulnerability management. Amazon GuardDuty monitors the AWS environment for threats, whereas Amazon Inspector evaluates container images for known software vulnerabilities.

Step-by-Step Solution

1
Identify the service needed for continuous monitoring of AWS accounts for unauthorized behavior and malicious activity.
Amazon GuardDuty uses machine learning, anomaly detection, and integrated threat intelligence to detect malicious activity across accounts.
This matches the threat detection requirement of the agency.
2
Identify the service needed to scan Amazon ECR container images for software vulnerabilities.
Amazon Inspector automatically scans container images stored in Amazon ECR for known vulnerabilities.
This matches the vulnerability management requirement of the agency.

Key Concept

AWS threat detection and vulnerability management services
Rate this question

Topics

Threat Detection and Vulnerability Management

More questions from this topic