Eccouncil Exam 312-40 Topic 1 Question 8 Discussion

Actual exam question for Eccouncil's 312-40 exam

Question #: 8
Topic #: 1

Richard Roxburgh works as a cloud security engineer in an IT company. His organization was dissatisfied with the services of its previous cloud service provider. Therefore, in January 2020, his organization adopted AWS cloud-based services and shifted all workloads and data in the AWS cloud. Richard wants to provide complete security to the hosted applications before deployment and while running in the AWS ecosystem. Which of the following automated security assessment services provided by AWS can be used by Richard to improve application security and check the application for any type of vulnerability or deviation from the best practices automatically?

AAWS CloudFormation

BAmazon Inspector

CAWS Control Tower

DAmazon CloudFront

Show Suggested Answer

Suggested Answer: B

1.Amazon Inspector: It is an automated security assessment service that helps improve the security and compliance of applications deployed on AWS1.

1.Automated Scans: Amazon Inspector automatically scans workloads, such as Amazon EC2 instances, containers, and Lambda functions, for vulnerabilities and unintended network exposure1.

1.Security Best Practices: It checks for deviations from best practices and provides detailed findings that include information about the nature of the threat, the affected resources, and recommendations for remediation1.

1.Integration with AWS: As an AWS-native service, Amazon Inspector is well-integrated into the AWS ecosystem, making it suitable for Richard's requirements to secure applications before deployment and while running1.

1.Exclusion of Other Options: AWS CloudFormation is used for infrastructure as code, AWS Control Tower for governance, and Amazon CloudFront for content delivery, none of which are automated security assessment services1.

AWS's official page on Amazon Inspector1.

by Rodolfo at Jul 02, 2024, 01:25 AM

Limited Time Offer

25%

Off

Get Premium 312-40 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Noel

1 months ago

Haha, CloudFront is for content delivery, not security assessment. Good one though, that was a bit of a trick question.

upvoted 0 times

Blondell

3 days ago

B) Amazon Inspector

upvoted 0 times

...

Amos

17 days ago

A) AWS CloudFormation

upvoted 0 times

...

Rashida

1 months ago

CloudFormation is great for automating the deployment of infrastructure, but I don't think it's the best fit for security assessment. Gotta go with Inspector on this one.

upvoted 0 times

...