Exam AWS-SysOps topic 1 question 578 discussion

Exam question from Amazon's AWS-SysOps

Question #: 578
Topic #: 1

A company has deployed a new application running on Amazon EC2 instances. The application team must verify for the Security team that all common vulnerabilities and exposures have been addressed, both now and regularly throughout the application's lifespan.
How can the Application team satisfy the Security team's requirement?

A. Perform regular assessments with Amazon Inspector
B. Perform regular assessments with AWS Trusted Advisor
C. Integrate AWS Personal Health Dashboard with Amazon CloudWatch events to get security notifications
D. Grant the Administrator and Security team access to AWS Artifact

Show Suggested Answer

Suggested Answer: A 🗳️

by saumenP at Oct. 28, 2019, 4:01 p.m.

Disclaimers:

- ExamTopics website is not related to, affiliated with, endorsed or authorized by Amazon.
- Trademarks, certification & product names are used for reference only and belong to Amazon.

Comments

Submit Cancel

saumenP

Highly Voted 2 years, 7 months ago

A is correct ; https://aws.amazon.com/inspector/

upvoted 10 times

karmaah

2 years, 7 months ago

Yes. Amazon Inspector checks the configuration of EC2 instances. This is what the agent does: Runs and checks operating system patches Checks known vulnerabilities & common issues. Trusted Advisor will advise you about your AWS Account. Following are some of the concerning areas: Cost Optimization Fault Tolerance Performance Service Limits Security (Not Depth)

upvoted 4 times

...

albert_kuo

Most Recent 10 months ago

Selected Answer: A

Amazon Inspector is a security assessment service provided by AWS. It helps to identify potential security vulnerabilities in applications deployed on EC2 instances. By running regular assessments with Amazon Inspector, the Application team can scan the instances and identify any CVEs or other security issues. The assessment results provide detailed findings, including recommendations for remediation.

upvoted 1 times

...

sen12

2 years, 7 months ago

here the Keyword is "Vulnerability" which is detected by Amazon Inspector and not by Amazon Trusted Advisor.

upvoted 3 times

...

Exam AWS-SysOps All Questions

View all questions & answers for the AWS-SysOps exam