Your company manages thousands of EC2 Instances. There is a mandate to ensure that all servers don't have any critical security flaws. Which of the following can be done to ensure this? Choose 2…

Question

Options

• AUse AWS Config to ensure that the servers have no critical flaws.
• BUse AWS inspector to ensure that the servers have no critical flaws.
• CUse AWS inspector to patch the servers
• DUse AWS SSM to patch the servers

• A
  4% (3)
• B
  82% (56)
• C
  13% (9)

Explanation

The AWS Documentation mentions the following on AWS Inspector Amazon Inspector is an automated security assessment service that helps improve the security and compliance of applications deployed on AWS. Amazon Inspector automatically assesses applications for vulnerabilities or deviations from best practices. After performing an assessment, Amazon Inspector produces a detailed list of security findings prioritized by level of severity. These findings can be reviewed directly or as part of detailed assessment reports which are available via the Amazon Inspector console or API. Option A is invalid because the AWS Config service is not used to check the vulnerabilities on Option C is invalid because the AWS Inspector service is not used to patch servers

No community discussion yet for this question.