A media streaming company wants to improve its security posture on AWS. The company needs to implement continuous monitoring of its AWS accounts for malicious activity or unauthorized behavior. Additionally, it needs to automatically scan its Amazon EC2 instances for software vulnerabilities.
Which of the following AWS services should the company use to meet these requirements? (Select two.)
- Amazon GuardDutyAnswer
- Amazon InspectorAnswer
- CAWS CloudTrail
- DAmazon CloudWatch
- EAWS Artifact
Answer
Amazon GuardDuty and Amazon Inspector are the correct services. Amazon GuardDuty provides continuous threat detection across AWS accounts, while Amazon Inspector automatically scans EC2 instances for software vulnerabilities.
Amazon GuardDuty is correct because it provides continuous, intelligent threat detection by monitoring network logs and account activity. Amazon Inspector is correct because it is the dedicated tool for scanning EC2 instances and container images for software vulnerabilities and network exposure.
Step-by-Step Solution
Key Concept
Identifying the distinct roles of AWS threat detection and vulnerability management services.