Eccouncil Exam 312-40 Topic 1 Question 8 Discussion

Actual exam question for Eccouncil's 312-40 exam

Question #: 8
Topic #: 1

Richard Roxburgh works as a cloud security engineer in an IT company. His organization was dissatisfied with the services of its previous cloud service provider. Therefore, in January 2020, his organization adopted AWS cloud-based services and shifted all workloads and data in the AWS cloud. Richard wants to provide complete security to the hosted applications before deployment and while running in the AWS ecosystem. Which of the following automated security assessment services provided by AWS can be used by Richard to improve application security and check the application for any type of vulnerability or deviation from the best practices automatically?

AAWS CloudFormation

BAmazon Inspector

CAWS Control Tower

DAmazon CloudFront

Show Suggested Answer

Suggested Answer: B

1.Amazon Inspector: It is an automated security assessment service that helps improve the security and compliance of applications deployed on AWS1.

1.Automated Scans: Amazon Inspector automatically scans workloads, such as Amazon EC2 instances, containers, and Lambda functions, for vulnerabilities and unintended network exposure1.

1.Security Best Practices: It checks for deviations from best practices and provides detailed findings that include information about the nature of the threat, the affected resources, and recommendations for remediation1.

1.Integration with AWS: As an AWS-native service, Amazon Inspector is well-integrated into the AWS ecosystem, making it suitable for Richard's requirements to secure applications before deployment and while running1.

1.Exclusion of Other Options: AWS CloudFormation is used for infrastructure as code, AWS Control Tower for governance, and Amazon CloudFront for content delivery, none of which are automated security assessment services1.

AWS's official page on Amazon Inspector1.

by Rodolfo at Jul 02, 2024, 01:25 AM

Limited Time Offer

25%

Off

Get Premium 312-40 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Noel

11 months ago

Haha, CloudFront is for content delivery, not security assessment. Good one though, that was a bit of a trick question.

upvoted 0 times

Melissia

9 months ago

Thanks for the clarification, I'll keep that in mind for future reference.

upvoted 0 times

...

Kallie

9 months ago

B) Amazon Inspector is the correct answer for automated security assessment services provided by AWS.

upvoted 0 times

...

Geraldo

9 months ago

Yeah, CloudFront is definitely not for security assessment.

upvoted 0 times

...

Deandrea

9 months ago

D) Amazon CloudFront

upvoted 0 times

...

Jessenia

9 months ago

C) AWS Control Tower

upvoted 0 times

...

Glynda

9 months ago

B) Amazon Inspector

upvoted 0 times

...

Laticia

9 months ago

A) AWS CloudFormation

upvoted 0 times

...

Cornell

9 months ago

Thanks for the clarification, I'll keep that in mind for future reference.

upvoted 0 times

...

Lashunda

9 months ago

B) Amazon Inspector is the correct answer for automated security assessment services provided by AWS.

upvoted 0 times

...

Yuki

9 months ago

Yeah, CloudFront is definitely not for security assessment.

upvoted 0 times

...

Camellia

9 months ago

D) Amazon CloudFront

upvoted 0 times

...

Lindy

9 months ago

C) AWS Control Tower

upvoted 0 times

...

Blondell

10 months ago

B) Amazon Inspector

upvoted 0 times

...

Amos

10 months ago

A) AWS CloudFormation

upvoted 0 times

...

Rashida

11 months ago

CloudFormation is great for automating the deployment of infrastructure, but I don't think it's the best fit for security assessment. Gotta go with Inspector on this one.

upvoted 0 times

...