CLF-C02 Question 85
Select 4A company is hosting a web application on Amazon EC2 instances. They want to enhance the security of their environment by identifying and addressing vulnerabilities, monitoring for malicious activity, and protecting against Distributed Denial-of-Service (DDoS) attacks. Which combination of AWS services can help achieve this goal?
- A
Amazon Inspector
- B
AWS Shield
- C
Amazon GuardDuty
- D
AWS Security Hub
- E
AWS Auto Scaling
Show answer and explanation
Correct answers: A, B, C, D
Explanation
To secure the resources in this scenario, the company can use Amazon Inspector to assess vulnerabilities, AWS Shield to protect against DDoS attacks, Amazon GuardDuty to monitor for malicious activity, and AWS Security Hub to centralize and analyze security findings. AWS Auto Scaling, while useful for scaling resources, does not contribute directly to security in this context.
- A. Correct.
Amazon Inspector is used to identify vulnerabilities in EC2 instances and other resources, helping to secure the environment.
- B. Correct.
AWS Shield provides protection against Distributed Denial-of-Service (DDoS) attacks, enhancing security for web applications.
- C. Correct.
Amazon GuardDuty monitors AWS accounts and workloads for malicious activity and unauthorized behavior.
- D. Correct.
AWS Security Hub aggregates security findings from multiple AWS services, providing a comprehensive view of the environment's security posture.
- E. Incorrect.
AWS Auto Scaling is used to automatically adjust the number of EC2 instances to meet demand but does not directly enhance security.