Examkin

Soru

Zorluk: OrtaThreat Detection and Vulnerability Management

A digital real estate platform runs its database and web servers on Amazon Elastic Compute Cloud (Amazon EC2) instances. The platform's security team needs to implement a solution that automatically scans these EC2 instances for software vulnerabilities, package issues, and unintended network path exposures. Which AWS service should the real estate platform use to meet these requirements?

  1. Amazon InspectorCevap
  2. B
    Amazon GuardDuty
  3. C
    AWS CloudTrail
  4. D
    AWS Systems Manager

Cevap

Amazon Inspector
Amazon Inspector is the correct service because it is specifically designed to perform automated vulnerability scans on Amazon EC2 instances, Amazon ECR container images, and AWS Lambda functions, detecting known software vulnerabilities and unintended network paths.

Adım Adım Çözüm

1
Identify the primary requirement in the scenario, which is scanning Amazon EC2 instances for software vulnerabilities, package issues, and unintended network path exposures.
The target task is vulnerability management and host-level security assessment.
This narrows down the potential AWS services to those focused on scanning workloads for known CVEs and exposure.
2
Evaluate the available AWS security services against this requirement and select the one designed specifically for automated vulnerability scanning.
Amazon Inspector is the designated service for automated vulnerability management on EC2 and container images.
It matches the scanning requirement, whereas other security services focus on threat detection, logging, or operational management.

Anahtar Kavram

Amazon Inspector is an automated vulnerability management service that continuously scans AWS workloads for software vulnerabilities and unintended network exposure.
Bu soruyu puanla

Konular

Threat Detection and Vulnerability Management

Bu konudan daha fazla soru