Examkin

Soru

Zorluk: OrtaThreat Detection and Vulnerability Management

An automotive telemetry platform processes vehicle sensor data using a fleet of Amazon EC2 instances. The security team needs to implement a solution to scan these EC2 instances for known software vulnerabilities and continuously monitor the AWS accounts for malicious activity or unauthorized behavior. Which two AWS services should the platform use to meet these requirements? (Select two.)

  1. Amazon InspectorCevap
  2. Amazon GuardDutyCevap
  3. C
    Amazon CloudWatch
  4. D
    AWS CloudTrail
  5. E
    AWS Shield

Cevap

Amazon Inspector and Amazon GuardDuty
The correct services are Amazon Inspector and Amazon GuardDuty. Amazon Inspector performs vulnerability management by scanning EC2 instances for software vulnerabilities and unintended network exposure. Amazon GuardDuty provides intelligent threat detection by continuously monitoring AWS accounts and workloads for malicious activity.

Adım Adım Çözüm

1
Identify the requirement for software vulnerability scanning on Amazon EC2 instances.
Amazon Inspector is selected as it is specifically designed to scan EC2 instances and container images for software vulnerabilities and network exposure.
Vulnerability scanning is a core function of Amazon Inspector.
2
Identify the requirement for continuous threat detection and monitoring of malicious activity across the AWS account.
Amazon GuardDuty is selected as it uses machine learning and threat intelligence to detect unauthorized behavior and malicious activity.
Intelligent threat detection across AWS accounts and workloads is the primary use case for Amazon GuardDuty.

Anahtar Kavram

Identifying AWS services for threat detection and vulnerability management
Bu soruyu puanla

Konular

Threat Detection and Vulnerability Management

Bu konudan daha fazla soru