Free Amazon SCS-C03 Exam Questions
Absolute Free SCS-C03 Exam Practice for Comprehensive Preparation
-
Amazon SCS-C03 Exam Questions
-
Provided By: Amazon
- Exam: AWS Certified Security - Specialty
- Certification: AWS Certified Security
-
Total Questions: 236
-
Updated On: Sep 23, 2026
-
Rated: 4.9 |
-
Online Users: 472
-
Question 1
-
A company is building a secure solution that relies on an AWS Key Management Service (AWS KMS)
customer managed key. The company wants to allow AWS Lambda to use the KMS key. However, the
company wants to prevent Amazon EC2 from using the key.
Which solution will meet these requirements?
Answer: B
-
A company is building a secure solution that relies on an AWS Key Management Service (AWS KMS)
customer managed key. The company wants to allow AWS Lambda to use the KMS key. However, the
company wants to prevent Amazon EC2 from using the key.
Which solution will meet these requirements?
-
Question 2
-
An AWS Lambda function was misused to alter data, and a security engineer must identify who invoked the
function and what output was produced. The engineer cannot find any logs created by the Lambda function in
Amazon CloudWatch Logs.
Which of the following explains why the logs are not available?
Answer: A
-
An AWS Lambda function was misused to alter data, and a security engineer must identify who invoked the
function and what output was produced. The engineer cannot find any logs created by the Lambda function in
Amazon CloudWatch Logs.
Which of the following explains why the logs are not available?
-
Question 3
-
A company runs an application on an Amazon EC2 instance. The application generates invoices and stores
them in an Amazon S3 bucket. The instance profile that is attached to the instance has appropriate access to
the S3 bucket. The company needs to share each invoice with multiple clients that do not have AWS
credentials. Each client must be able to download only the client's own invoices. Clients must download their
invoices within 1 hour of invoice creation. Clients must use only temporary credentials to access the
company's AWS resources.
Which additional step will meet these requirements?
Answer: B
-
A company runs an application on an Amazon EC2 instance. The application generates invoices and stores
them in an Amazon S3 bucket. The instance profile that is attached to the instance has appropriate access to
the S3 bucket. The company needs to share each invoice with multiple clients that do not have AWS
credentials. Each client must be able to download only the client's own invoices. Clients must download their
invoices within 1 hour of invoice creation. Clients must use only temporary credentials to access the
company's AWS resources.
Which additional step will meet these requirements?
-
Question 4
-
A company is running a new workload across accounts in an organization in AWS Organizations. All running
resources must have a tag of CostCenter, and the tag must have one of three approved values. The company
must enforce this policy and must prevent any changes of the CostCenter tag to a non-approved value.
Which solution will meet these requirements?
Answer: C
-
A company is running a new workload across accounts in an organization in AWS Organizations. All running
resources must have a tag of CostCenter, and the tag must have one of three approved values. The company
must enforce this policy and must prevent any changes of the CostCenter tag to a non-approved value.
Which solution will meet these requirements?
-
Question 5
-
A company needs a cloud-based, managed desktop solution for its workforce of remote employees. The
company wants to ensure that the employees can access the desktops only by using company-provided
devices. A security engineer must design a solution that will minimize cost and management overhead.
Which solution will meet these requirements?
Answer: D
-
A company needs a cloud-based, managed desktop solution for its workforce of remote employees. The
company wants to ensure that the employees can access the desktops only by using company-provided
devices. A security engineer must design a solution that will minimize cost and management overhead.
Which solution will meet these requirements?