A company is integrating security controls into a microservices architecture. The architect needs to ensure that security policies are applied consistently across all services without requiring code changes in each service. Which approach best supports this requirement?

Use a service mesh with mutual TLS and policy enforcement

Rely on the underlying operating system for security

Implement security checks in each microservice's code

Place all microservices in a single security group

A company is deploying a new application on AWS and needs to monitor for security events. The security team wants to detect suspicious API calls, such as attempts to access resources without authorization. They also want to be able to query the logs for forensic analysis. Which solution should the solutions architect implement?

Enable Amazon GuardDuty and send findings to Amazon CloudWatch Events.

Enable VPC Flow Logs and store them in Amazon CloudWatch Logs.

Enable AWS Config and use AWS Config rules to detect unauthorized API calls.

Enable AWS CloudTrail and deliver logs to Amazon S3, then use Amazon Athena to query the logs.

A company is deploying a critical application on AWS and wants to ensure it can respond quickly to a security breach. The security team needs to be able to isolate compromised resources and preserve evidence for forensic analysis. Which solution should the solutions architect implement?

Enable AWS CloudTrail and Amazon GuardDuty, and create an automated response playbook that can detach security groups and take EBS snapshots.

Create a manual runbook that instructs the security team to log in to the AWS Management Console and investigate.

Enable only Amazon CloudWatch alarms to notify the security team of unusual activity.

Use AWS Config rules to automatically terminate any EC2 instance that has a vulnerability.

AWSCertified Solutions Architect - Professional

Domain 2Objective 3

Task 2.3: Determine Security Controls Based on Requirements SAP-C02 Practice Questions (Page 4)

Part of the Content Domain 2: Design for New Solutions domain, which makes up ~31% of our current practice bank. AWS does not publish an official question count, but from its 180-minute exam (~70–120 total, ~22–37 in this domain), expect 4–6 from this objective — we provide 31 practice questions to prepare you well beyond it. (estimate)

31questions here

7free pages

10concepts

Questions 16–20

16foundation · easy
A company is integrating security controls into a microservices architecture. The architect needs to ensure that security policies are applied consistently across all services without requiring code changes in each service. Which approach best supports this requirement?
Select an answer first
17expert · medium
A company is deploying a new application on AWS and needs to monitor for security events. The security team wants to detect suspicious API calls, such as attempts to access resources without authorization. They also want to be able to query the logs for forensic analysis. Which solution should the solutions architect implement?
Select an answer first
18foundation · easy
A solutions architect is designing network security for a multi-tier application. The architect wants to isolate the web servers from the database servers and control traffic between them. Which AWS service can be used to create subnets and define routing rules to enforce this segmentation?
Select an answer first
19foundation · easy
A healthcare organization in the United States must protect electronic protected health information (ePHI). Which regulation sets the security and privacy standards that the organization must follow?
Select an answer first
20application · medium
A company is deploying a critical application on AWS and wants to ensure it can respond quickly to a security breach. The security team needs to be able to isolate compromised resources and preserve evidence for forensic analysis. Which solution should the solutions architect implement?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SAP-C02

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by AWS. “SAP-C02” is a trademark of its owner, used for identification only.

Task 2.3: Determine Security Controls Based on Requirements SAP-C02 Practice Questions (Page 4)

Questions 16–20

A company is integrating security controls into a microservices architecture. The architect needs to ensure that security policies are applied consistently across all services without requiring code changes in each service. Which approach best supports this requirement?

A solutions architect is designing network security for a multi-tier application. The architect wants to isolate the web servers from the database servers and control traffic between them. Which AWS service can be used to create subnets and define routing rules to enforce this segmentation?

A healthcare organization in the United States must protect electronic protected health information (ePHI). Which regulation sets the security and privacy standards that the organization must follow?

A company is deploying a critical application on AWS and wants to ensure it can respond quickly to a security breach. The security team needs to be able to isolate compromised resources and preserve evidence for forensic analysis. Which solution should the solutions architect implement?

Keep studying — Content Domain 2: Design for New Solutions