Examkin

Soru

Zorluk: KolayThreat Detection and Vulnerability Management

A media streaming company wants to enhance its security posture. The security team needs a solution to achieve two goals: first, they want to continuously monitor their AWS accounts for malicious activity and unauthorized behavior; second, they want to perform automated security assessments on their Amazon EC2 instances to identify software vulnerabilities. Which of the following AWS services should the company use to meet these requirements? (Select two.)

  1. Amazon GuardDutyCevap
  2. Amazon InspectorCevap
  3. C
    AWS CloudTrail
  4. D
    AWS Shield
  5. E
    AWS Artifact

Cevap

Amazon GuardDuty and Amazon Inspector are the correct services. Amazon GuardDuty provides active threat detection across AWS accounts, while Amazon Inspector performs vulnerability scanning on Amazon EC2 instances.
Amazon GuardDuty continuously monitors AWS accounts and workloads for malicious activity and unauthorized behavior. Amazon Inspector provides automated vulnerability scanning for Amazon EC2 instances to identify software vulnerabilities and unintended network exposure. Together, they satisfy the requirements for threat detection and vulnerability management.

Adım Adım Çözüm

1
Identify the service required for active threat detection and continuous monitoring of malicious behavior across AWS accounts.
Amazon GuardDuty is identified as the service that monitors account activity using machine learning and threat intelligence.
To satisfy the requirement of detecting unauthorized or malicious activity at the account level.
2
Identify the service required for scanning Amazon EC2 instances for software vulnerabilities.
Amazon Inspector is identified as the service that automatically scans EC2 instances and ECR container images for software vulnerabilities.
To satisfy the requirement of detecting host-level software vulnerabilities.

Anahtar Kavram

AWS threat detection and vulnerability management services
Bu soruyu puanla

Konular

Threat Detection and Vulnerability Management

Bu konudan daha fazla soru