AWS Certified Security - Specialty SCS-C02 — Topic 1 Question 256

Question

A security engineer is designing security controls for a fleet of Amazon EC2 instances that run sensitive workloads in a VPC. The security engineer needs to implement a solution to detect and mitigate software vulnerabilities on the EC2 instances. Which solution will meet this requirement?

Accepted Answer

Correct answer: A. The correct answer is A. Option A: Scan the EC2 instances by using Amazon Inspector. Apply security patches and updates by using AWS Systems Manager Patch Manager. Amazon EC2 provides resizable virtual servers when you need full control of the operating system. Amazon Inspector automatically scans workloads for software vulnerabilities. AWS Systems Manager operates and automates management of fleets of resources.

AWS Certified Security - Specialty SCS-C02 — Question 256