AWSCertified Security - Specialty
Domain 5Objective 2
Task 5.2: Design and Implement Controls for Data at Rest SCS-C03 Practice Questions (Page 2)
Part of the Content Domain 5: Data Protection domain, which accounts for 18% of the SCS-C03 exam. AWS does not publish an official question count, but from its 170-minute exam (~70–115 total, ~13–21 in this domain), expect 4–7 from this objective — we provide 31 practice questions to prepare you well beyond it. (estimate)
31questions here
7free pages
14concepts
18%of the exam
Questions 6–10
- 6
A company needs to store audit records in Amazon S3 in a way that prevents any user, including the AWS account root user, from deleting or overwriting the objects for a specific retention period. Which S3 Object Lock feature should be used?
Select an answer first - 7
A company wants to centralize backup management across multiple AWS services, including Amazon RDS databases, EBS volumes, and S3 buckets. They need a single policy to automate backups, set retention periods, and enable cross-region backup copies for disaster recovery. Which service should they use?
Select an answer first - 8
A company needs to encrypt objects in Amazon S3 using server-side encryption. The security team requires that the encryption keys be managed by AWS Key Management Service (KMS) to enable separate permissions for key usage and auditing. Which server-side encryption option should be used?
Select an answer first - 9
A company must ensure that data is encrypted before it is transmitted to AWS. The encryption keys must be managed entirely by the company, and AWS should never have access to the plaintext data or the keys. Which approach should be used?
Select an answer first - 10
A company uses Amazon EFS for shared file storage. They want to automatically move files that have not been accessed for 30 days to the Infrequent Access (IA) storage class to reduce costs. Which feature should be configured?
Select an answer first
Finished these 5 questions?
Review the revealed explanations, or continue through the curriculum.
Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by AWS. “SCS-C03” is a trademark of its owner, used for identification only.