Examkin

Soru

Zorluk: OrtaThreat Detection and Vulnerability Management

A logistics company manages its supply chain application on AWS. The security team needs to implement a solution that satisfies two requirements: first, automatically scanning container images stored in Amazon Elastic Container Registry (ECR) for software vulnerabilities; second, continuously monitoring the AWS environment for anomalous API activity and potential unauthorized access. Which of the following AWS services should the company use to meet these requirements? (Select two.)

  1. Amazon InspectorCevap
  2. Amazon GuardDutyCevap
  3. C
    AWS CloudTrail
  4. D
    Amazon CloudWatch
  5. E
    AWS WAF

Cevap

The logistics company should use Amazon Inspector and Amazon GuardDuty to meet these requirements.
To satisfy the requirements, the company must use a combination of vulnerability scanning and intelligent threat detection. Amazon Inspector automatically and continuously scans container images in Amazon Elastic Container Registry (ECR) for known software vulnerabilities. Amazon GuardDuty provides continuous monitoring and intelligent threat detection by analyzing API actions and logs to identify anomalous behavior and unauthorized access.

Adım Adım Çözüm

1
Analyze the first requirement: vulnerability scanning of container images in Amazon Elastic Container Registry (ECR).
Identify Amazon Inspector as the service designed to automatically and continuously scan EC2 workloads, Lambda functions, and ECR container images for software vulnerabilities.
Amazon Inspector specifically handles software vulnerability scanning on the host and container levels.
2
Analyze the second requirement: continuous monitoring of the AWS environment for anomalous API activity and unauthorized access.
Identify Amazon GuardDuty as the intelligent threat detection service that analyzes logs (such as CloudTrail logs) to discover anomalous API activity.
Amazon GuardDuty uses machine learning and threat intelligence to identify suspicious behavior and threats across the AWS environment.

Anahtar Kavram

Vulnerability scanning and threat detection using Amazon Inspector and Amazon GuardDuty.
Tahmini Süre:1m 30s
Bu soruyu puanla

Konular

Threat Detection and Vulnerability Management

Bu konudan daha fazla soru