AWSCertified Security - Specialty
Domain 1Objective 2
Task 1.2: Design and Implement Logging Solutions SCS-C03 Practice Questions (Page 7)
Part of the Content Domain 1: Detection domain, which accounts for 16% of the SCS-C03 exam. AWS does not publish an official question count, but from its 170-minute exam (~70–115 total, ~11–18 in this domain), expect 4–6 from this objective — we provide 44 practice questions to prepare you well beyond it. (estimate)
44questions here
9free pages
18concepts
16%of the exam
Questions 31–35
- 31
A security team needs to monitor DNS queries made by resources in a VPC to detect potential DNS tunneling. Which log source should be enabled?
Select an answer first - 32
A company uses a transit gateway to connect multiple VPCs and an on-premises network. The security team needs to analyze traffic patterns between VPCs to detect lateral movement. Which log source should they enable?
Select an answer first - 33
What is a common use case for using AWS Lambda in a logging solution?
Select an answer first - 34
Which AWS service can be used to run custom code in response to log events for real-time processing, such as enriching or transforming log data?
Select an answer first - 35
Which AWS service provides a purpose-built security data lake that automatically centralizes and normalizes security logs from multiple AWS sources?
Select an answer first
Finished these 5 questions?
Review the revealed explanations, or continue through the curriculum.
Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by AWS. “SCS-C03” is a trademark of its owner, used for identification only.