AWSCertified Security - Specialty
Domain 1Objective 2
Task 1.2: Design and Implement Logging Solutions SCS-C03 Practice Questions (Page 9)
Part of the Content Domain 1: Detection domain, which accounts for 16% of the SCS-C03 exam. AWS does not publish an official question count, but from its 170-minute exam (~70–115 total, ~11–18 in this domain), expect 4–6 from this objective — we provide 44 practice questions to prepare you well beyond it. (estimate)
44questions here
9free pages
18concepts
16%of the exam
Questions 41–44
- 41
A security team wants to centralize VPC Flow Logs, CloudTrail, and Security Hub findings from multiple accounts into a single data lake for long-term retention and ad-hoc SQL analysis. The team needs to query the data using standard SQL and retain it for 5 years. Which solution BEST meets these requirements?
Select an answer first - 42
A security analyst needs to count the number of failed login attempts in the last 24 hours from application logs stored in CloudWatch Logs. Which CloudWatch Logs Insights query function should be used?
Select an answer first - 43
Which AWS service aggregates security findings from multiple AWS services like GuardDuty, Inspector, and Macie into a single console?
Select an answer first - 44
A company must retain security logs for 7 years to meet a regulatory compliance requirement. Which AWS service is designed for long-term, cost-effective storage of log data?
Select an answer first
Finished these 4 questions?
Review the revealed explanations, or continue through the curriculum.
No more pagesBack to SCS-C03
Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by AWS. “SCS-C03” is a trademark of its owner, used for identification only.