Examkin

Soru

Zorluk: OrtaThreat Detection and Vulnerability Management

A digital marketing agency needs to implement security measures for its AWS infrastructure. The agency wants to continuously monitor its AWS accounts for unauthorized behavior and malicious activity. Additionally, they need to scan their Amazon Elastic Container Registry (Amazon ECR) container images for software vulnerabilities. Which two AWS services should the agency use to meet these requirements? (Select two.)

  1. Amazon GuardDutyCevap
  2. Amazon InspectorCevap
  3. C
    AWS CloudTrail
  4. D
    Amazon CloudWatch
  5. E
    AWS Shield

Cevap

Amazon GuardDuty and Amazon Inspector are the correct services. Amazon GuardDuty provides continuous threat detection by analyzing logs for malicious behavior, while Amazon Inspector scans container images in Amazon ECR for software vulnerabilities.
Amazon GuardDuty and Amazon Inspector are the appropriate AWS services for threat detection and vulnerability management. Amazon GuardDuty monitors the AWS environment for threats, whereas Amazon Inspector evaluates container images for known software vulnerabilities.

Adım Adım Çözüm

1
Identify the service needed for continuous monitoring of AWS accounts for unauthorized behavior and malicious activity.
Amazon GuardDuty uses machine learning, anomaly detection, and integrated threat intelligence to detect malicious activity across accounts.
This matches the threat detection requirement of the agency.
2
Identify the service needed to scan Amazon ECR container images for software vulnerabilities.
Amazon Inspector automatically scans container images stored in Amazon ECR for known vulnerabilities.
This matches the vulnerability management requirement of the agency.

Anahtar Kavram

AWS threat detection and vulnerability management services
Bu soruyu puanla

Konular

Threat Detection and Vulnerability Management

Bu konudan daha fazla soru