CLF-C02 Question 130
Single answerYour company has recently migrated its infrastructure to AWS. The security team wants to regularly identify potential security vulnerabilities and misconfigurations in the AWS environment. Which AWS service can be used to provide real-time recommendations for improving the security of your environment?
- A
AWS Trusted Advisor
- B
Amazon CloudWatch
- C
AWS CloudTrail
- D
Amazon Inspector
Show answer and explanation
Correct answer: A
Explanation
AWS Trusted Advisor is the appropriate service for identifying security issues and providing actionable recommendations across a wide range of areas, including security. While other services like AWS CloudTrail, Amazon CloudWatch, and Amazon Inspector have specific roles in monitoring or assessing aspects of security, Trusted Advisor is designed to help optimize and secure your overall AWS environment proactively.
- A. Correct.
AWS Trusted Advisor provides real-time recommendations for improving security, cost, performance, fault tolerance, and service limits in your AWS environment. It is specifically designed to identify potential misconfigurations and vulnerabilities.
- B. Incorrect.
Amazon CloudWatch is a monitoring and observability service used to collect and track metrics, logs, and events for AWS resources, but it is not designed to provide security recommendations.
- C. Incorrect.
AWS CloudTrail is a service that records API calls and activity in your AWS account for auditing and compliance purposes. While it tracks user and resource activity, it does not provide direct recommendations for security improvements.
- D. Incorrect.
Amazon Inspector is an automated security assessment service that helps assess security vulnerabilities in EC2 instances and container images, but it does not provide the broad security recommendations that AWS Trusted Advisor offers.