Examers.io
ExamsOrganizationsHow it worksPricingHelp & FAQ
AWS logo

AWSCertified Security - Specialty

Domain 1Objective 1

Task 1.1: Design and Implement Monitoring and Alerting Solutions for an AWS Account or Organization SCS-C03 Practice Questions (Page 2)

Part of the Content Domain 1: Detection domain, which accounts for 16% of the SCS-C03 exam. AWS does not publish an official question count, but from its 170-minute exam (~70–115 total, ~11–18 in this domain), expect 4–6 from this objective — we provide 19 practice questions to prepare you well beyond it. (estimate)

19questions here
4free pages
5concepts
16%of the exam

Questions 6–10

  1. 6foundation · easy

    A security team wants to view findings from Amazon GuardDuty, Amazon Macie, and AWS Security Hub in a single console. Which service is designed to aggregate and prioritize security findings from multiple AWS services?

    Select an answer first
  2. 7foundation · easy

    A solutions architect is designing a monitoring strategy for an Amazon EC2-based workload. The strategy must automatically recover an instance if it becomes unhealthy due to an underlying hardware failure. Which AWS service should be used to configure this health check and recovery?

    Select an answer first
  3. 8foundation · easy

    A security team needs to create a visual dashboard that displays real-time metrics for CPU utilization of EC2 instances and the number of GuardDuty findings. Which AWS service can be used to build this unified dashboard?

    Select an answer first
  4. 9expert · medium

    A company has a fleet of EC2 instances that run a web server. The security team wants to detect a potential distributed denial-of-service (DDoS) attack. They have enabled VPC Flow Logs and are publishing them to CloudWatch Logs. Which metric filter pattern should they use to detect a high number of connection attempts from a single source IP?

    Select an answer first
  5. 10foundation · easy

    A company wants to monitor the health of a web application running on Amazon EC2 instances behind an Application Load Balancer. The monitoring strategy must detect when the application returns HTTP 500 errors. Which AWS service should be used to create a metric and alarm for this purpose?

    Select an answer first
Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by AWS. “SCS-C03” is a trademark of its owner, used for identification only.