Examkin

Question

Difficulty: EasyThreat Detection and Vulnerability Management

A company needs to perform automated security assessments on its Amazon EC2 instances to identify software vulnerabilities and unintended network exposure. Which AWS service should the company use to meet this requirement?

  1. A
    Amazon GuardDuty
  2. B
    AWS CloudTrail
  3. Amazon InspectorAnswer
  4. D
    AWS Shield

Answer

Amazon Inspector
Amazon Inspector is the correct service because it provides automated security assessments that scan Amazon EC2 instances, container images, and Lambda functions for known software vulnerabilities and unintended network reachability.

Step-by-Step Solution

1
Identify the core requirement of the scenario: the company needs to perform automated security assessments on Amazon EC2 instances to find software vulnerabilities and unintended network exposure.
The requirement is focused on host-level vulnerability scanning and network exposure checks.
This narrows down the potential services to those that inspect the internal state of EC2 instances and network paths.
2
Evaluate the functions of the available AWS security services to find the correct match.
Amazon Inspector is identified as the service designed specifically for automated vulnerability management and scanning of EC2 workloads, whereas the other options focus on threat detection, API logging, or DDoS protection.
Selecting the service that matches the host-level vulnerability scanning definition ensures compliance with AWS best practices.

Key Concept

Amazon Inspector is the primary AWS service for automated vulnerability scanning of EC2 instances, container images, and Lambda functions.
Estimated Time:45s
Rate this question

Topics

Threat Detection and Vulnerability Management

More questions from this topic