A company has a set of EC2 Instances hosted in a VPC. There is a requirement to perform a scan to see if there are any security vulnerabilities. The check needs to be done as per the Industry standards of the “Center for Internet Security (CIS) Benchmarks”. Which of the following can help you achieve this requirement?

Answer options:

A.Use the AWS Trusted Advisor.
B.Use the AWS Inspector service.
C.Use the AWS Config service.
D.Use the AWS GuardDuty service.

Correct Answer: B
The following are the rules packages available in Amazon Inspector.
· Common Vulnerabilities and Exposures
· Center for Internet Security (CIS) Benchmarks
· Security Best Practices
· Runtime Behavior Analysis
Hence, you can use the AWS Inspector service to scan the Instances for vulnerabilities based on this package.
Option A is incorrect since this can only give you various recommendations.
Option C is incorrect since this is a configuration service.
Option D is incorrect since this is a managed threat detection service.
For more information on AWS Inspector, please refer to the below URL-
https://docs.aws.amazon.com/inspector/latest/userguide/inspector_rule-packages.html