A company wants to establish a continuous security improvement process. The security team currently performs manual security reviews every six months. The team wants to automate the detection of security issues and track remediation progress. Which solution should the team implement?

Use AWS Trusted Advisor to run a weekly report and email it to the security team.

Use AWS Security Hub to aggregate findings and create a dashboard to track remediation progress.

Use AWS Config to record resource configurations and send alerts on non-compliant resources.

Use AWS Systems Manager to run a patching compliance report on a monthly basis.

A solutions architect wants to detect and respond to security incidents by collecting and analyzing logs. Which AWS service is designed for this purpose?

AWS Key Management Service (KMS)

AWS Identity and Access Management (IAM)

A company wants to establish a process for regularly reviewing and updating its security measures to adapt to evolving threats. Which practice should the company adopt?

Continuous security improvement

A company wants to detect and respond to security incidents in its AWS environment. The company has enabled CloudTrail and VPC Flow Logs. The security team needs a centralized view of security findings and the ability to automate responses. Which solution should the team implement?

Use Amazon GuardDuty to analyze VPC Flow Logs and CloudTrail, and send alerts to an SNS topic.

Create a custom dashboard in Amazon QuickSight to visualize CloudTrail and VPC Flow Logs.

Use AWS Security Hub to aggregate findings from CloudTrail, VPC Flow Logs, and other services, and use Amazon EventBridge to trigger automated responses.

Enable AWS Config and use its built-in rules to detect security issues.

What is the primary purpose of a security assessment for an existing solution?

To respond to an active security incident

To identify and evaluate security gaps and risks

To design a new application architecture

AWSCertified Solutions Architect - Professional

Domain 3Objective 2

Task 3.2: Determine a Strategy to Improve Security. SAP-C02 Practice Questions (Page 4)

Part of the Content Domain 3: Continuous Improvement for Existing Solutions domain, which makes up ~27% of our current practice bank. AWS does not publish an official question count, but from its 180-minute exam (~70–120 total, ~19–32 in this domain), expect 4–6 from this objective — we provide 33 practice questions to prepare you well beyond it. (estimate)

33questions here

7free pages

8concepts

Questions 16–20

16application · medium
A company wants to establish a continuous security improvement process. The security team currently performs manual security reviews every six months. The team wants to automate the detection of security issues and track remediation progress. Which solution should the team implement?
Select an answer first
17foundation · easy
A solutions architect wants to detect and respond to security incidents by collecting and analyzing logs. Which AWS service is designed for this purpose?
Select an answer first
18foundation · easy
A company wants to establish a process for regularly reviewing and updating its security measures to adapt to evolving threats. Which practice should the company adopt?
Select an answer first
19application · medium
A company wants to detect and respond to security incidents in its AWS environment. The company has enabled CloudTrail and VPC Flow Logs. The security team needs a centralized view of security findings and the ability to automate responses. Which solution should the team implement?
Select an answer first
20foundation · easy
What is the primary purpose of a security assessment for an existing solution?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SAP-C02

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by AWS. “SAP-C02” is a trademark of its owner, used for identification only.