File Info
| Exam | AWS Certified Security - Specialty |
| Number | SCS-C01 |
| File Name | Amazon.SCS-C01.VCEplus.2024-08-14.108q.tqb |
| Size | 2 MB |
| Posted | Aug 14, 2024 |
| Download | Amazon.SCS-C01.VCEplus.2024-08-14.108q.tqb |
How to open VCEX & EXAM Files?
Files with VCEX & EXAM extensions can be opened by ProfExam Simulator.
Coupon: MASTEREXAM
With discount: 20%
Demo Questions
Question 1
The Security team believes that a former employee may have gained unauthorized access to AWS resources sometime in the past 3 months by using an identified access key.
What approach would enable the Security team to find out what the former employee may have done within AWS?
- Use the AWS CloudTrail console to search for user activity.
- Use the Amazon CloudWatch Logs console to filter CloudTrail data by user.
- Use AWS Config to see what actions were taken by the user.
- Use Amazon Athena to query CloudTrail logs stored in Amazon S3.
Correct answer: A
Question 2
The Security Engineer implemented a new vault lock policy for 10TB of data and called initiate-vault-lock 12 hours ago. The Audit team identified a typo that is allowing incorrect access to the vault.
What is the MOST cost-effective way to correct this?
- Call the abort-vault-lock operation, fix the typo, and call the initiate-vault-lock again.
- Copy the vault data to Amazon S3, delete the vault, and create a new vault with the data.
- Update the policy, keeping the vault lock in place.
- Update the policy and call initiate-vault-lock again to apply the new policy.
Correct answer: A
Question 3
A company wants to control access to its AWS resources by using identities and groups that are defined in its existing Microsoft Active Directory.
What must the company create in its AWS account to map permissions for AWS services to Active Directory user attributes?
- AWS IAM groups
- AWS IAM users
- AWS IAM roles
- AWS IAM access keys
Correct answer: C
Explanation:
Reference: https://aws.amazon.com/blogs/security/how-to-connect-your-on-premises-active-directory-to-aws-using-ad-connector/ Reference: https://aws.amazon.com/blogs/security/how-to-connect-your-on-premises-active-directory-to-aws-using-ad-connector/
