The correct choice is Amazon Inspector. It is the AWS service that automatically evaluates Amazon EC2 workloads for software vulnerabilities and unintended network exposure and it uses a host level agent on instances to collect data for assessments.

Amazon Inspector performs automated, agent based assessments and can leverage AWS Systems Manager to deploy and manage the agent on EC2 instances. It generates actionable findings for vulnerabilities and configuration issues so teams can prioritize remediation and integrate results into continuous security workflows.

AWS Trusted Advisor provides account level recommendations for cost optimization, performance, and some security best practices, but it does not perform host level vulnerability scans or require an agent on EC2 instances.

AWS Pricing Calculator is a cost estimation tool and it is unrelated to security assessments or instance level vulnerability scanning.

AWS Personal Health Dashboard delivers personalized alerts and guidance about AWS service health events that affect your resources and it does not scan applications or instances for vulnerabilities.

Full AWS Practitioner Certification Question