Soru

Zorluk: KolaySecurity Monitoring and Threat Detection

A company wants to continuously monitor its AWS resource configurations to ensure they comply with security standards. The company also needs a centralized dashboard to aggregate security alerts and evaluate compliance against the CIS AWS Foundations Benchmark. Which TWO services should the solutions architect recommend to meet these requirements?

  1. AWS Config to track resource configuration changes and evaluate compliance against desired configurationsCevap
  2. AWS Security Hub to aggregate security alerts from multiple AWS services and run automated compliance checks against industry standardsCevap
  3. C
    AWS Shield Advanced to automatically monitor and detect application-layer exploits such as SQL injection
  4. D
    AWS WAF to monitor API configuration logs and track resource compliance changes across regions
  5. E
    VPC Network Access Control Lists (NACLs) to statefully inspect resource modifications and block non-compliant configuration changes

Cevap

AWS Config and AWS Security Hub
AWS Config is the correct service for tracking, auditing, and evaluating configurations of AWS resources. AWS Security Hub is the correct service for aggregating security findings from multiple AWS services and evaluating compliance against security standards (such as the CIS AWS Foundations Benchmark). Together, they satisfy the requirement of continuous configuration compliance monitoring and centralized alert aggregation.

Adım Adım Çözüm

1
Identify the requirement for tracking and auditing AWS resource configurations over time.
AWS Config is selected as the primary service for tracking configuration changes and evaluating compliance against rules.
AWS Config continuously monitors resource configurations and maintains a history of changes.
2
Identify the requirement for a centralized dashboard to aggregate security alerts and check compliance against security standards.
AWS Security Hub is selected to aggregate alerts and perform automated compliance checks.
AWS Security Hub consolidates security findings from various AWS services and conducts continuous compliance checks against standards like the CIS AWS Foundations Benchmark.

Anahtar Kavram

Continuous security monitoring, compliance checks, and centralized security posture management using AWS Config and AWS Security Hub.
Bu soruyu puanla