Examkin

Question

Difficulty: MediumThreat Detection and Vulnerability Management

A logistics company manages its supply chain application on AWS. The security team needs to implement a solution that satisfies two requirements: first, automatically scanning container images stored in Amazon Elastic Container Registry (ECR) for software vulnerabilities; second, continuously monitoring the AWS environment for anomalous API activity and potential unauthorized access. Which of the following AWS services should the company use to meet these requirements? (Select two.)

  1. Amazon InspectorAnswer
  2. Amazon GuardDutyAnswer
  3. C
    AWS CloudTrail
  4. D
    Amazon CloudWatch
  5. E
    AWS WAF

Answer

The logistics company should use Amazon Inspector and Amazon GuardDuty to meet these requirements.
To satisfy the requirements, the company must use a combination of vulnerability scanning and intelligent threat detection. Amazon Inspector automatically and continuously scans container images in Amazon Elastic Container Registry (ECR) for known software vulnerabilities. Amazon GuardDuty provides continuous monitoring and intelligent threat detection by analyzing API actions and logs to identify anomalous behavior and unauthorized access.

Step-by-Step Solution

1
Analyze the first requirement: vulnerability scanning of container images in Amazon Elastic Container Registry (ECR).
Identify Amazon Inspector as the service designed to automatically and continuously scan EC2 workloads, Lambda functions, and ECR container images for software vulnerabilities.
Amazon Inspector specifically handles software vulnerability scanning on the host and container levels.
2
Analyze the second requirement: continuous monitoring of the AWS environment for anomalous API activity and unauthorized access.
Identify Amazon GuardDuty as the intelligent threat detection service that analyzes logs (such as CloudTrail logs) to discover anomalous API activity.
Amazon GuardDuty uses machine learning and threat intelligence to identify suspicious behavior and threats across the AWS environment.

Key Concept

Vulnerability scanning and threat detection using Amazon Inspector and Amazon GuardDuty.
Estimated Time:1m 30s
Rate this question

Topics

Threat Detection and Vulnerability Management

More questions from this topic