Examkin

Soru

Zorluk: OrtaThreat Detection and Vulnerability Management

A logistics and package delivery company runs its route optimization software on a fleet of Amazon EC2 instances. The cybersecurity team wants to implement a security solution to achieve two goals: automatically scan the EC2 instances for known software vulnerabilities, and continuously monitor the AWS account for threat patterns such as credential theft or anomalous API activity. Which AWS services should the company use to meet these requirements? (Select two.)

  1. Amazon InspectorCevap
  2. Amazon GuardDutyCevap
  3. C
    Amazon Macie
  4. D
    AWS CloudTrail
  5. E
    AWS WAF

Cevap

Amazon Inspector and Amazon GuardDuty
Amazon Inspector is the dedicated service for scanning EC2 instances for software vulnerabilities and network reachability issues. Amazon GuardDuty is the correct service for active threat detection, leveraging machine learning and threat intelligence to identify anomalous account behavior, credential compromises, and malicious activity.

Adım Adım Çözüm

1
Identify the requirement for software vulnerability scanning on the virtual hosts.
Amazon Inspector is identified as the AWS service designed for automated package and software vulnerability assessment of Amazon EC2 instances.
Inspector runs automated assessments to find vulnerabilities and unintended network exposure on virtual machine instances.
2
Identify the requirement for continuous account-level threat detection.
Amazon GuardDuty is identified as the intelligent threat detection service that monitors logs (like CloudTrail and VPC Flow Logs) to identify malicious actions, compromised credentials, or anomalous behavior.
GuardDuty uses machine learning and threat intelligence to analyze account activity and identify threats in real time.

Anahtar Kavram

Vulnerability scanning versus threat detection in AWS security services
Tahmini Süre:1m 30s
Bu soruyu puanla

Konular

Threat Detection and Vulnerability Management

Bu konudan daha fazla soru