Task 2.1: Design and Test an Incident Response Plan SCS-C03 Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   A security engineer is writing a runbook for responding to a compromised EC2 instance. Which element should be included in the runbook to ensure responders can follow it effectively?

   • AA list of all employees in the organization
   • BA list of AWS services available in the organization
   • CThe company's marketing strategy
   • DDetailed commands and procedures to isolate the instance and collect evidence
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   A team wants to use AWS Fault Injection Service to test the resilience of an application. What is the primary purpose of using fault injection in this context?

   • ATo observe how the application and incident response plan react to controlled failures
   • BTo detect malicious activity in the environment
   • CTo replace the need for security monitoring
   • DTo automatically remediate security findings
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   A security team wants to test its incident response plan by simulating a security incident in a low-risk, discussion-based environment. Which type of exercise should they conduct?

   • ATabletop exercise
   • BPenetration testing
   • CRed team exercise
   • DFull-scale simulation with live traffic
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   A company is creating an incident response plan. The plan must include a clear sequence of actions to detect, respond to, and recover from security incidents. Which element of the plan directly addresses this requirement?

   • AA diagram of the network architecture
   • BProcedures that outline the step-by-step actions to be taken during each phase of an incident
   • CA budget for purchasing additional security tools
   • DA list of employee contact information
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   A security team wants to trigger a Lambda function to automatically remediate a security finding. What is a common way to trigger the Lambda function?

   • AUsing Amazon Inspector to directly invoke the Lambda function
   • BUsing AWS Config to directly invoke the Lambda function
   • CUsing Amazon EventBridge to route a security finding event to the Lambda function
   • DUsing AWS CloudTrail to directly invoke the Lambda function
   Reveal Solution Discussion Select an answer first