A company needs to run a weekly security assessment across all of its EC2 instances. The assessment involves checking for missing patches and running a vulnerability scan. The company wants to automate this process and store the results. Which solution should they use?

Use AWS Config to create a rule that checks for missing patches and runs a vulnerability scan every week.

Use AWS Trusted Advisor to run a weekly patch and vulnerability scan on all EC2 instances.

Use Amazon EventBridge to schedule an AWS Lambda function that runs a custom script to check for patches and scan for vulnerabilities.

Use AWS Systems Manager State Manager to create an association that runs a Systems Manager patch scan and an Amazon Inspector scan on a schedule.

A security team needs to ensure that all EC2 instances have the latest security patches applied. They want to automate the patching process and also generate a report of which instances have been patched. They are considering using AWS Systems Manager Patch Manager. What additional step is required to generate the report?

Use AWS Trusted Advisor to generate a patch compliance report.

Enable detailed monitoring on the instances to track patch installation.

Create an Amazon EventBridge rule to capture patch installation events and store them in Amazon S3.

Use AWS Config to create a rule that checks if instances are compliant with the patch baseline.

A security engineer is defining monitoring requirements for a new AWS workload that must comply with a regulation requiring audit logs of all administrative actions to be retained for seven years. Which input is most important for determining the appropriate monitoring and alerting requirements?

The marketing team's preference for dashboard visuals

The workload's compliance and regulatory requirements

The number of Availability Zones the workload uses

The cost of the monitoring services selected

AWSCertified Security - Specialty

Domain 1Objective 1

Task 1.1: Design and Implement Monitoring and Alerting Solutions for an AWS Account or Organization SCS-C03 Practice Questions (Page 4)

Part of the Content Domain 1: Detection domain, which accounts for 16% of the SCS-C03 exam. AWS does not publish an official question count, but from its 170-minute exam (~70–115 total, ~11–18 in this domain), expect 4–6 from this objective — we provide 19 practice questions to prepare you well beyond it. (estimate)

19questions here

4free pages

5concepts

16%of the exam

Questions 16–19

16foundation · easy
A security engineer wants to create a custom metric that counts the number of failed login attempts to an application and then triggers an alert when the count exceeds a threshold. Which AWS service should be used to create the metric and alarm?
Select an answer first
17application · medium
A company needs to run a weekly security assessment across all of its EC2 instances. The assessment involves checking for missing patches and running a vulnerability scan. The company wants to automate this process and store the results. Which solution should they use?
Select an answer first
18expert · medium
A security team needs to ensure that all EC2 instances have the latest security patches applied. They want to automate the patching process and also generate a report of which instances have been patched. They are considering using AWS Systems Manager Patch Manager. What additional step is required to generate the report?
Select an answer first
19foundation · easy
A security engineer is defining monitoring requirements for a new AWS workload that must comply with a regulation requiring audit logs of all administrative actions to be retained for seven years. Which input is most important for determining the appropriate monitoring and alerting requirements?
Select an answer first

Finished these 4 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to SCS-C03

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by AWS. “SCS-C03” is a trademark of its owner, used for identification only.

Task 1.1: Design and Implement Monitoring and Alerting Solutions for an AWS Account or Organization SCS-C03 Practice Questions (Page 4)

Questions 16–19

A security engineer wants to create a custom metric that counts the number of failed login attempts to an application and then triggers an alert when the count exceeds a threshold. Which AWS service should be used to create the metric and alarm?

A company needs to run a weekly security assessment across all of its EC2 instances. The assessment involves checking for missing patches and running a vulnerability scan. The company wants to automate this process and store the results. Which solution should they use?

A security engineer is defining monitoring requirements for a new AWS workload that must comply with a regulation requiring audit logs of all administrative actions to be retained for seven years. Which input is most important for determining the appropriate monitoring and alerting requirements?

Keep studying — Content Domain 1: Detection