Examkin

Soru

Zorluk: OrtaThreat Detection and Vulnerability Management

A telemedicine platform hosts its patient portal application on Amazon EC2 instances. The platform's security team needs to implement a solution that continuously monitors the AWS account for malicious activity and unauthorized access, while also automatically scanning the EC2 instances for known software vulnerabilities and unintended network exposure. Which two AWS services should the security team use to meet these requirements? (Select two.)

  1. Amazon GuardDutyCevap
  2. Amazon InspectorCevap
  3. C
    AWS CloudTrail
  4. D
    Amazon CloudWatch
  5. E
    AWS Shield

Cevap

Amazon GuardDuty and Amazon Inspector are the correct services. Amazon GuardDuty provides continuous threat detection across the AWS environment, while Amazon Inspector scans the EC2 instances for software vulnerabilities and network exposure.
Amazon GuardDuty continuously monitors AWS accounts and workloads for malicious activity such as credential compromise or malware, while Amazon Inspector automatically scans EC2 instances for software vulnerabilities and unintended network exposure. Together, they satisfy the requirement for both threat detection and vulnerability scanning.

Adım Adım Çözüm

1
Analyze the requirement for host-level software vulnerability and network exposure scanning on Amazon EC2 instances.
Amazon Inspector is identified as the service designed for automated vulnerability assessment of EC2 instances.
Inspector performs software package vulnerability checks and assesses network reachability of hosts.
2
Analyze the requirement for continuous account-level monitoring for malicious activity and unauthorized behavior.
Amazon GuardDuty is identified as the designated intelligent threat detection service.
GuardDuty monitors logs (such as CloudTrail, VPC Flow Logs, and DNS logs) to detect activities like cryptomining, credential exfiltration, or unauthorized access.

Anahtar Kavram

AWS threat detection and vulnerability management services
Bu soruyu puanla

Konular

Threat Detection and Vulnerability Management

Bu konudan daha fazla soru