Question

Difficulty: EasyThreat Detection and Vulnerability Management

A media streaming company wants to improve its security posture on AWS. The company needs to implement continuous monitoring of its AWS accounts for malicious activity or unauthorized behavior. Additionally, it needs to automatically scan its Amazon EC2 instances for software vulnerabilities.

Which of the following AWS services should the company use to meet these requirements? (Select two.)

  1. Amazon GuardDutyAnswer
  2. Amazon InspectorAnswer
  3. C
    AWS CloudTrail
  4. D
    Amazon CloudWatch
  5. E
    AWS Artifact

Answer

Amazon GuardDuty and Amazon Inspector are the correct services. Amazon GuardDuty provides continuous threat detection across AWS accounts, while Amazon Inspector automatically scans EC2 instances for software vulnerabilities.
Amazon GuardDuty is correct because it provides continuous, intelligent threat detection by monitoring network logs and account activity. Amazon Inspector is correct because it is the dedicated tool for scanning EC2 instances and container images for software vulnerabilities and network exposure.

Step-by-Step Solution

1
Identify the service needed for continuous monitoring of AWS accounts for malicious or unauthorized activity.
Amazon GuardDuty is designed for intelligent threat detection and continuous monitoring of AWS workloads and accounts.
GuardDuty uses machine learning and threat intelligence to detect anomalies and unauthorized activities.
2
Identify the service needed to scan Amazon EC2 instances for software vulnerabilities.
Amazon Inspector is the service that automatically scans EC2 instances, containers, and serverless functions for known vulnerabilities.
Inspector compares system configurations and software packages against databases of known security vulnerabilities.

Key Concept

Identifying the distinct roles of AWS threat detection and vulnerability management services.
Rate this question