AWSCertified Security - Specialty
Domain 3Objective 3
Task 3.3: Design and Troubleshoot Network Security Controls SCS-C03 Practice Questions (Page 1)
Part of the Content Domain 3: Infrastructure Security domain, which accounts for 18% of the SCS-C03 exam. AWS does not publish an official question count, but from its 170-minute exam (~70–115 total, ~13–21 in this domain), expect 4–7 from this objective — we provide 23 practice questions to prepare you well beyond it. (estimate)
23questions here
5free pages
8concepts
18%of the exam
Questions 1–5
- 1
Which components are integrated with AWS Verified Access to determine access to applications?
Select an answer first - 2
Which Direct Connect connection type supports MACsec encryption?
Select an answer first - 3
A security engineer reviews an Amazon Inspector network reachability finding that shows an instance is reachable on port 22 from the internet. What does this finding indicate?
Select an answer first - 4
A security engineer wants to isolate a database tier from the application tier at the subnet level. Which AWS component should be used to control traffic between subnets?
Select an answer first - 5
A company has an on-premises data center connected to AWS via AWS Direct Connect. The company also has a Site-to-Site VPN as a backup. The security engineer needs to ensure that traffic between the data center and AWS uses the Direct Connect connection when it is available and fails over to the VPN if Direct Connect goes down. What should the engineer configure?
Select an answer first
Finished these 5 questions?
Review the revealed explanations, or continue through the curriculum.
Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by AWS. “SCS-C03” is a trademark of its owner, used for identification only.