Examkin

Question

Difficulty: MediumThreat Detection and Vulnerability Management

An online educational platform hosts its application on Amazon EC2 instances. The DevOps team wants to automatically scan these virtual servers for software packages with known vulnerabilities and identify any unintended public network exposure. Which AWS service should the platform use to perform this automated vulnerability assessment?

  1. Amazon InspectorAnswer
  2. B
    Amazon GuardDuty
  3. C
    AWS CloudTrail
  4. D
    AWS Trusted Advisor

Answer

Amazon Inspector
The correct answer is Amazon Inspector. Amazon Inspector is an automated vulnerability management service that scans EC2 instances, container images in Amazon ECR, and AWS Lambda functions for software vulnerabilities and unintended network path exposure.

Step-by-Step Solution

1
Identify the core security requirement in the scenario.
The platform needs to scan host operating systems on EC2 instances for software vulnerabilities and network exposure.
This clarifies that the solution must perform vulnerability assessment and path analysis rather than audit logging or threat detection.
2
Evaluate the capabilities of the available security services.
Amazon Inspector is the specialized AWS service that continuously and automatically performs host-level vulnerability scans on EC2 instances and ECR container images.
Matching the requirements to the specific capabilities of Amazon Inspector yields the correct solution.

Key Concept

Amazon Inspector is the primary AWS service used for automated vulnerability management and scanning of EC2 instances, container images, and Lambda functions.
Rate this question

Topics

Threat Detection and Vulnerability Management

More questions from this topic