AWSCertified Security - Specialty
Domain 5Objective 2
Task 5.2: Design and Implement Controls for Data at Rest SCS-C03 Practice Questions (Page 6)
Part of the Content Domain 5: Data Protection domain, which accounts for 18% of the SCS-C03 exam. AWS does not publish an official question count, but from its 170-minute exam (~70–115 total, ~13–21 in this domain), expect 4–7 from this objective — we provide 31 practice questions to prepare you well beyond it. (estimate)
31questions here
7free pages
14concepts
18%of the exam
Questions 26–30
- 26
A company wants to securely replicate data from an on-premises file server to Amazon S3. The data must be encrypted in transit and at rest. Which AWS service should be used?
Select an answer first - 27
A security engineer needs to create a backup plan that backs up an Amazon RDS database daily and retains the backups for 30 days. Which AWS Backup component should be used to define the schedule and retention?
Select an answer first - 28
A software vendor wants to ensure that a binary file distributed to customers has not been tampered with and was indeed created by the vendor. Which technique should be used?
Select an answer first - 29
A security team is implementing ransomware protection for data at rest. Which practice is essential to limit the impact of a compromised user account?
Select an answer first - 30
A company wants to encrypt data at rest in Amazon S3 and needs to use envelope encryption with automatic key rotation and integration with AWS CloudTrail for auditing key usage. Which service should be used?
Select an answer first
Finished these 5 questions?
Review the revealed explanations, or continue through the curriculum.
Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by AWS. “SCS-C03” is a trademark of its owner, used for identification only.