Examkin

Soru

Zorluk: OrtaThreat Detection and Vulnerability Management

A media company is migrating its video-on-demand platform to AWS. The security team needs to implement a logging and security monitoring solution that meets two requirements:

1. It must record, continuously monitor, and retain a history of all API calls and user actions within the AWS account for compliance auditing.
2. It must provide continuous, intelligent threat detection and anomaly monitoring to identify potential malicious activity, such as brute-force attacks or compromised credentials.

Which AWS services should the company implement to satisfy these security requirements? (Select two.)

  1. AWS CloudTrailCevap
  2. Amazon GuardDutyCevap
  3. C
    Amazon CloudWatch
  4. D
    Amazon Inspector
  5. E
    AWS Key Management Service (AWS KMS)

Cevap

The correct services are AWS CloudTrail and Amazon GuardDuty.
AWS CloudTrail is correct because it monitors and logs account activity, including actions taken through the AWS Management Console, SDKs, and command line tools, which satisfies the compliance auditing requirement. Amazon GuardDuty is correct because it is a threat detection service that continuously monitors for malicious activity and unauthorized behavior using machine learning and anomaly detection.

Adım Adım Çözüm

1
Identify the service required to record and audit API calls and user activity.
AWS CloudTrail is identified as the service designed to track and log all API activity and user actions across the AWS account.
AWS CloudTrail records API history, enabling operational auditing, security analysis, and compliance tracking.
2
Identify the service required for continuous, intelligent threat detection and anomaly monitoring.
Amazon GuardDuty is identified as the intelligent threat detection service that analyzes logs to detect malicious activity.
Amazon GuardDuty uses machine learning and threat intelligence to detect threats like compromised credentials or malicious communications.

Anahtar Kavram

Differentiating between AWS security monitoring services (Amazon GuardDuty and AWS CloudTrail) and other operational or security services (Amazon Inspector, Amazon CloudWatch, and AWS KMS).
Bu soruyu puanla

Konular

Threat Detection and Vulnerability Management

Bu konudan daha fazla soru