AWSCertified Security - Specialty
Domain 3Objective 3
Task 3.3: Design and Troubleshoot Network Security Controls SCS-C03 Practice Questions (Page 5)
Part of the Content Domain 3: Infrastructure Security domain, which accounts for 18% of the SCS-C03 exam. AWS does not publish an official question count, but from its 170-minute exam (~70–115 total, ~13–21 in this domain), expect 4–7 from this objective — we provide 23 practice questions to prepare you well beyond it. (estimate)
23questions here
5free pages
8concepts
18%of the exam
Questions 21–23
- 21
A security engineer needs to deploy AWS Network Firewall to filter traffic between subnets in a VPC. What is a required component for this deployment?
Select an answer first - 22
A security engineer needs to establish a secure connection from an on-premises network to a VPC over the public internet. Which service provides IPsec encryption for this connection?
Select an answer first - 23
A security engineer needs to control east/west traffic between instances in the same subnet. Which AWS security control is most appropriate for this task?
Select an answer first
Finished these 3 questions?
Review the revealed explanations, or continue through the curriculum.
No more pagesBack to SCS-C03
Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by AWS. “SCS-C03” is a trademark of its owner, used for identification only.