CLF-C02 Question 87
Select 3A company wants to improve its security posture on AWS by identifying vulnerabilities, consolidating security findings from multiple services, and detecting potential malicious activities. Which combination of AWS services should they use?
- A
Amazon Inspector
- B
AWS Security Hub
- C
Amazon GuardDuty
- D
AWS Shield
Show answer and explanation
Correct answers: A, B, C
Explanation
To improve security posture on AWS, a combination of services is needed. Amazon Inspector handles vulnerability and misconfiguration detection, AWS Security Hub consolidates security findings across multiple services, and Amazon GuardDuty provides threat detection. While AWS Shield is also a security service, it focuses specifically on protecting against DDoS attacks, which is not the primary focus of this scenario.
- A. Correct.
Amazon Inspector is used to identify vulnerabilities and misconfigurations in EC2 instances and container images, making it a critical tool for proactive security management.
- B. Correct.
AWS Security Hub provides a centralized view of security findings across multiple AWS services, allowing for easier management and prioritization of security alerts.
- C. Correct.
Amazon GuardDuty detects potential malicious activity and unauthorized behavior in AWS environments by analyzing logs like VPC Flow Logs and CloudTrail.
- D. Incorrect.
AWS Shield is a managed DDoS protection service that specifically safeguards against distributed denial of service attacks, but it does not cover the broader spectrum of security tasks like vulnerability management or activity detection.