Examkin

Question

Difficulty: EasyThreat Detection and Vulnerability Management

An online travel agency wants to improve its security posture on AWS. The company needs to implement a solution that continuously monitors its AWS accounts for malicious activity or unauthorized access, and it also needs to automate security assessments of its Amazon EC2 instances to identify software vulnerabilities. Which two AWS services should the company use to meet these requirements? (Select two.)

  1. Amazon GuardDutyAnswer
  2. Amazon InspectorAnswer
  3. C
    AWS Shield
  4. D
    AWS CloudTrail
  5. E
    Amazon CloudWatch

Answer

Amazon GuardDuty and Amazon Inspector are the correct services because Amazon GuardDuty provides intelligent threat detection through continuous log analysis, while Amazon Inspector automates vulnerability scanning for host systems and software dependencies.
Amazon GuardDuty and Amazon Inspector are correct. Amazon GuardDuty continuously monitors AWS accounts and workloads for threats and malicious activity using machine learning. Amazon Inspector automatically assesses Amazon EC2 instances for software vulnerabilities and unintended network exposure.

Step-by-Step Solution

1
Identify the requirement for continuous threat detection and unauthorized behavior monitoring.
Amazon GuardDuty is selected as it uses machine learning and threat intelligence to analyze logs and detect malicious activity.
GuardDuty is the primary AWS service for active threat detection across accounts.
2
Identify the requirement for automated security assessments and software vulnerability scanning of Amazon EC2 instances.
Amazon Inspector is selected as it scans workloads (such as EC2 instances) for software packages vulnerabilities and network reachability issues.
Inspector is the primary AWS service for host-level vulnerability scanning.

Key Concept

AWS Threat Detection and Vulnerability Management Services
Rate this question

Topics

Threat Detection and Vulnerability Management

More questions from this topic