Topic 1 Question 520
3 つ選択A company has several AWS Lambda functions written in Python. The functions are deployed with the .zip package deployment type. The functions use a Lambda layer that contains common libraries and packages in a .zip file. The Lambda .zip packages and Lambda layer .zip file are stored in an Amazon S3 bucket.
The company must implement automatic scanning of the Lambda functions and the Lambda layer to identify CVEs. A subset of the Lambda functions must receive automated code scans to detect potential data leaks and other vulnerabilities. The code scans must occur only for selected Lambda functions, not all the Lambda functions.
Which combination of actions will meet these requirements?
Activate Amazon Inspector. Start automated CVE scans.
Activate Lambda standard scanning and Lambda code scanning in Amazon Inspector.
Enable Amazon GuardDuty. Enable the Lambda Protection feature in GuardDuty.
Enable scanning in the Monitor settings of the Lambda functions that need code scans.
Tag Lambda functions that do not need code scans. In the tag, include a key of InspectorCodeExclusion and a value of LambdaCodeScanning.
Use Amazon Inspector to scan the 3 bucket that contains the Lambda .zip packages and the Lambda layer .zip file for code scans.
ユーザの投票
コメント(4)
- 正解だと思う選択肢: ABE
A, B and E Inspector for Lamda std scanning and code scanning Lambda Function with monitor setting to code scan Tag for conditional function, not for all functions
👍 5vip22024/07/05 - 正解だと思う選択肢: ABE
A: Need to Activate Amazon Inspector first B: For CVE, need to use Lambda standard scanning B: For data leaks, need to use Lambda code scanning E: Tag Lambda functions that do not need code scans
👍 2kgpoj2024/09/13 - 正解だと思う選択肢: ABE
A: Amazon Inspector can automatically scan your Lambda functions for known vulnerabilities (CVEs) in the dependencies of the functions. This action will initiate the security scanning of Lambda functions and Lambda layers to detect vulnerabilities. B: Amazon Inspector provides enhanced scanning features for Lambda functions. This includes both standard scanning (for CVEs in dependencies and layers) and code scanning (for potential vulnerabilities, like data leaks, directly in the code). E: https://docs.aws.amazon.com/lambda/latest/dg/governance-code-scanning.html#:~:text=To%20exclude%20a%20Lambda%20function,Value%3ALambdaStandardScanning. "To exclude a Lambda function from code scans, tag the function with the following key-value pair: Key:InspectorCodeExclusion Value:LambdaCodeScanning"
👍 2JoeTromundo2024/10/13
シャッフルモード