Home › AWS Solutions Architect Professional › cloudcomputing › sapimprovement › Which AWS service continuously scans EC2 instanc…
Which AWS service continuously scans EC2 instances and container images for software vulnerabilities (CVE) and network reachability misconfig?
AAmazon Macie
BAmazon RDS
CAmazon EBS
DAmazon Inspector
Answer & Solution
Correct answer: D. Amazon Inspector
Inspector is the vulnerability + reachability scanner (per SAP-C02 §1.2, §3.2). Macie is data-classification on S3; EBS/RDS are storage/DB.
Related questions
Which AWS Auto Scaling feature predicts traffic ahead of time using ML and scales capacityWhich AWS service provides edge-DDoS protection at L3/L4 + L7 with always-on detection — iAn architect must improve reliability of a multi-AZ workload that has a single-AZ Amazon RWhich AWS feature lets an architect detect unused or idle resources (e.g. detached EBS volWhich Amazon CloudFront feature lets an architect execute lightweight JavaScript at the edWhich AWS pattern adds an in-memory cache layer to reduce read pressure on Amazon RDS / AuWhich AWS service automatically discovers and classifies sensitive data (PII, PHI, credentWhich AWS service automates OS-patch management, run-command execution, parameter storage,