Examkin

Question

Difficulty: MediumThreat Detection and Vulnerability Management

A logistics and package delivery company runs its route optimization software on a fleet of Amazon EC2 instances. The cybersecurity team wants to implement a security solution to achieve two goals: automatically scan the EC2 instances for known software vulnerabilities, and continuously monitor the AWS account for threat patterns such as credential theft or anomalous API activity. Which AWS services should the company use to meet these requirements? (Select two.)

  1. Amazon InspectorAnswer
  2. Amazon GuardDutyAnswer
  3. C
    Amazon Macie
  4. D
    AWS CloudTrail
  5. E
    AWS WAF

Answer

Amazon Inspector and Amazon GuardDuty
Amazon Inspector is the dedicated service for scanning EC2 instances for software vulnerabilities and network reachability issues. Amazon GuardDuty is the correct service for active threat detection, leveraging machine learning and threat intelligence to identify anomalous account behavior, credential compromises, and malicious activity.

Step-by-Step Solution

1
Identify the requirement for software vulnerability scanning on the virtual hosts.
Amazon Inspector is identified as the AWS service designed for automated package and software vulnerability assessment of Amazon EC2 instances.
Inspector runs automated assessments to find vulnerabilities and unintended network exposure on virtual machine instances.
2
Identify the requirement for continuous account-level threat detection.
Amazon GuardDuty is identified as the intelligent threat detection service that monitors logs (like CloudTrail and VPC Flow Logs) to identify malicious actions, compromised credentials, or anomalous behavior.
GuardDuty uses machine learning and threat intelligence to analyze account activity and identify threats in real time.

Key Concept

Vulnerability scanning versus threat detection in AWS security services
Estimated Time:1m 30s
Rate this question

Topics

Threat Detection and Vulnerability Management

More questions from this topic