Examkin

Question

Difficulty: EasyThreat Detection and Vulnerability Management

A company wants to automate vulnerability assessments for its Amazon EC2 instances to identify software vulnerabilities and unintended network exposure. Which AWS service should the company use?

  1. A
    AWS CloudTrail
  2. B
    Amazon GuardDuty
  3. Amazon InspectorAnswer
  4. D
    AWS Key Management Service (KMS)

Answer

Amazon Inspector
Amazon Inspector is an automated vulnerability management service that continually scans AWS workloads (such as Amazon EC2 instances, AWS Lambda functions, and container images) for software vulnerabilities and unintended network exposure.

Step-by-Step Solution

1
Identify the goal
The company wants to automatically scan Amazon EC2 instances to check for software vulnerabilities and unintended network exposure.
This establishes the requirements of vulnerability scanning at the host/software level.
2
Select the appropriate AWS service
Amazon Inspector is selected as the correct service.
Amazon Inspector is specifically designed to automate security assessments and vulnerability scanning on EC2 instances and container images.

Key Concept

Vulnerability management on AWS hosts and packages
Estimated Time:45s
Rate this question

Topics

Threat Detection and Vulnerability Management

More questions from this topic