Examkin

Question

Difficulty: EasyThreat Detection and Vulnerability Management

An automobile manufacturer is migrating its web applications to AWS and wants to establish automated security checks. The manufacturer needs to implement software vulnerability assessments on its application hosts and monitor AWS account activity for potential security threats. Which AWS services should be selected to fulfill these requirements? (Select two.)

  1. Amazon InspectorAnswer
  2. Amazon GuardDutyAnswer
  3. C
    AWS CloudTrail
  4. D
    Amazon CloudWatch
  5. E
    AWS Artifact

Answer

Amazon Inspector and Amazon GuardDuty should be selected to meet the requirements.
Amazon Inspector is the correct choice for host and software vulnerability scanning on instances and containers. Amazon GuardDuty is the correct choice for continuous threat detection and monitoring of malicious activity across AWS accounts.

Step-by-Step Solution

1
Identify the requirement for software vulnerability assessment on application hosts.
Determine that Amazon Inspector is the AWS service designed to automatically scan EC2 instances and containers for known software vulnerabilities.
Host security scanning is a core feature of Amazon Inspector.
2
Identify the requirement to monitor AWS account activity for active security threats.
Determine that Amazon GuardDuty is the AWS service that uses intelligent threat detection to identify unauthorized or malicious activity across AWS accounts.
Threat detection based on account activity and network logs is a core feature of Amazon GuardDuty.

Key Concept

AWS threat detection and vulnerability management services
Rate this question

Topics

Threat Detection and Vulnerability Management

More questions from this topic