
AWSCertified Security - Specialty
Domain 2Objective 1
Task 2.1: Design and Test an Incident Response Plan SCS-C03 Practice Questions (Page 6)
Part of the Content Domain 2: Incident Response domain, which accounts for 14% of the SCS-C03 exam. AWS does not publish an official question count, but from its 170-minute exam (~70–115 total, ~10–16 in this domain), expect 5–8 from this objective — we provide 42 practice questions to prepare you well beyond it. (estimate)
42questions here
9free pages
16concepts
14%of the exam
Questions 26–30
- 26
A security engineer wants to automatically remediate a security finding by running a piece of code that revokes a compromised IAM access key. Which AWS service should the engineer use to run this code?
Select an answer first - 27
A security engineer wants to create an automated runbook that responds to a security finding by isolating an EC2 instance. Which AWS service should the engineer use to define and run the automated runbook?
Select an answer first - 28
A security engineer wants to use AWS Resilience Hub to validate that incident response measures are effective. What does AWS Resilience Hub provide to help with this validation?
Select an answer first - 29
A security team wants to automatically create an OpsItem in Systems Manager OpsCenter when a GuardDuty finding is detected. Which AWS service can be used to trigger the creation of the OpsItem based on the GuardDuty finding?
Select an answer first - 30
A security engineer is designing an incident response plan for a company that operates in multiple AWS accounts. The plan must clearly define who is responsible for making decisions during a security incident and who performs specific actions. Which component of the incident response plan should the engineer include to address this requirement?
Select an answer first
Finished these 5 questions?
Review the revealed explanations, or continue through the curriculum.
Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by AWS. “SCS-C03” is a trademark of its owner, used for identification only.