CLF-C02 Question 86
Select 3A company wants to enhance the security of its AWS environment by identifying potential vulnerabilities, ensuring compliance with security standards, and detecting suspicious activity in real time. Which combination of AWS services should the company use to achieve this?
- A
Amazon Inspector
- B
AWS Security Hub
- C
Amazon GuardDuty
- D
AWS Shield
- E
Amazon S3
Show answer and explanation
Correct answers: A, B, C
Explanation
To enhance the security of an AWS environment, the company should use Amazon Inspector to identify vulnerabilities, AWS Security Hub to centralize security compliance insights, and Amazon GuardDuty to detect potential threats in real time. Together, these services address the key security objectives of vulnerability management, compliance monitoring, and threat detection. AWS Shield and Amazon S3, while valuable for other use cases, do not directly fulfill all the requirements outlined in this scenario.
- A. Correct.
Amazon Inspector is a service that helps identify security vulnerabilities in EC2 instances and container images, making it suitable for vulnerability management.
- B. Correct.
AWS Security Hub provides a centralized view of security and compliance across an AWS environment, aggregating alerts and results from various services.
- C. Correct.
Amazon GuardDuty is a threat detection service that monitors for malicious or unauthorized activity in real time, enhancing AWS security.
- D. Incorrect.
AWS Shield is primarily designed to protect applications against Distributed Denial of Service (DDoS) attacks, which is not the primary focus in this scenario.
- E. Incorrect.
Amazon S3 is a storage service and does not directly contribute to identifying vulnerabilities, compliance, or threat detection.