Exam AWS-SysOps topic 1 question 745 discussion

Exam question from Amazon's AWS-SysOps

Question #: 745
Topic #: 1

A SysOps Administrator has been notified that some Amazon EC2 instances in the company's environment might have a vulnerable software version installed.
What should be done to check all of the instances in the environment with the LEAST operational overhead?

A. Create and run an Amazon Inspector assessment template.
B. Manually SSH into each instance and check the software version.
C. Use AWS CloudTrail to verify Amazon EC2 activity in the account.
D. Write a custom script and use AWS CodeDeploy to deploy to Amazon EC2 instances.

Show Suggested Answer

Suggested Answer: A 🗳️
Reference:
https://aws.amazon.com/inspector/faqs/

by Jichu at July 1, 2020, 12:39 p.m.

Disclaimers:

- ExamTopics website is not related to, affiliated with, endorsed or authorized by Amazon.
- Trademarks, certification & product names are used for reference only and belong to Amazon.

Comments

Submit Cancel

albert_kuo

1 year, 1 month ago

Selected Answer: A

Amazon Inspector is a security assessment service provided by AWS that helps identify vulnerabilities and security issues in EC2 instances. By creating and running an Amazon Inspector assessment template, the Administrator can automate the process of checking for vulnerable software versions across multiple instances. The assessment template can be configured to scan instances for known vulnerabilities and provide detailed reports on the findings. This approach minimizes operational overhead as it automates the scanning process and provides a consolidated view of the vulnerable instances.

upvoted 1 times

...

TroyMcLure

2 years, 9 months ago

Correct Answer: A "Vulnerability" => AWS Inspector "Amazon Inspector is an automated security assessment service that helps you test the network accessibility of your Amazon EC2 instances and the security state of your applications running on the instances. Amazon Inspector allows you to automate security vulnerability assessments throughout your development and deployment pipeline or against static production systems."

upvoted 1 times

...