Examkin

Question

Difficulty: MediumThreat Detection and Vulnerability Management

An automotive telemetry platform processes vehicle sensor data using a fleet of Amazon EC2 instances. The security team needs to implement a solution to scan these EC2 instances for known software vulnerabilities and continuously monitor the AWS accounts for malicious activity or unauthorized behavior. Which two AWS services should the platform use to meet these requirements? (Select two.)

  1. Amazon InspectorAnswer
  2. Amazon GuardDutyAnswer
  3. C
    Amazon CloudWatch
  4. D
    AWS CloudTrail
  5. E
    AWS Shield

Answer

Amazon Inspector and Amazon GuardDuty
The correct services are Amazon Inspector and Amazon GuardDuty. Amazon Inspector performs vulnerability management by scanning EC2 instances for software vulnerabilities and unintended network exposure. Amazon GuardDuty provides intelligent threat detection by continuously monitoring AWS accounts and workloads for malicious activity.

Step-by-Step Solution

1
Identify the requirement for software vulnerability scanning on Amazon EC2 instances.
Amazon Inspector is selected as it is specifically designed to scan EC2 instances and container images for software vulnerabilities and network exposure.
Vulnerability scanning is a core function of Amazon Inspector.
2
Identify the requirement for continuous threat detection and monitoring of malicious activity across the AWS account.
Amazon GuardDuty is selected as it uses machine learning and threat intelligence to detect unauthorized behavior and malicious activity.
Intelligent threat detection across AWS accounts and workloads is the primary use case for Amazon GuardDuty.

Key Concept

Identifying AWS services for threat detection and vulnerability management
Rate this question

Topics

Threat Detection and Vulnerability Management

More questions from this topic