A company is preparing for a SOC 2 audit and needs to continuously collect evidence of its AWS security controls, such as IAM policies, S3 bucket policies, and CloudTrail logs. The compliance team wants a prebuilt framework to map these controls to SOC 2 requirements and generate audit reports. What should the company use?

AWS Audit Manager with a prebuilt SOC 2 framework, which automatically collects evidence from AWS services and generates audit reports.

AWS Artifact to download the SOC 2 report and manually map the company's controls to the report's requirements.

AWS Well-Architected Tool to review the architecture against SOC 2 requirements and generate a compliance report.

AWS Config rules to evaluate the controls and export the compliance results to an S3 bucket for the audit team.

A company's external auditor requires the company to provide AWS's SOC 2 Type II report and the Data Processing Addendum (DPA) as part of the audit evidence. The company does not have a Business Associate Agreement (BAA) with AWS. What should the compliance team do to obtain these documents?

Use AWS Audit Manager to generate a SOC 2 Type II report and the DPA.

Use AWS Artifact to download the SOC 2 Type II report and the DPA.

Use AWS Config to export the compliance status of the company's resources and send it to the auditor as evidence.

Contact AWS Support to request the SOC 2 Type II report and DPA directly.

A compliance officer wants to use AWS Audit Manager to collect evidence for a specific compliance framework. What is the first step they should take in AWS Audit Manager?

Create an assessment based on a framework

Create an S3 bucket for evidence storage

Set up an Amazon SNS topic for notifications

AWSCertified Security - Specialty

Domain 6Objective 3

Task 6.3: Evaluate the Compliance of AWS Resources SCS-C03 Practice Questions (Page 1)

Part of the Content Domain 6: Security Foundations and Governance domain, which accounts for 14% of the SCS-C03 exam. AWS does not publish an official question count, but from its 170-minute exam (~70–115 total, ~10–16 in this domain), expect 3–5 from this objective — we provide 15 practice questions to prepare you well beyond it. (estimate)

15questions here

3free pages

7concepts

14%of the exam

Questions 1–5

1application · medium
A company is preparing for a SOC 2 audit and needs to continuously collect evidence of its AWS security controls, such as IAM policies, S3 bucket policies, and CloudTrail logs. The compliance team wants a prebuilt framework to map these controls to SOC 2 requirements and generate audit reports. What should the company use?
Select an answer first
2foundation · easy
A company needs to prepare for an audit by continuously collecting evidence of its AWS usage and controls. Which AWS service automates the collection of this evidence and organizes it into assessment reports?
Select an answer first
3application · easy
A company's external auditor requires the company to provide AWS's SOC 2 Type II report and the Data Processing Addendum (DPA) as part of the audit evidence. The company does not have a Business Associate Agreement (BAA) with AWS. What should the compliance team do to obtain these documents?
Select an answer first
4foundation · easy
A compliance officer wants to use AWS Audit Manager to collect evidence for a specific compliance framework. What is the first step they should take in AWS Audit Manager?
Select an answer first
5foundation · easy
A security engineer needs to continuously verify that all Amazon S3 buckets in an organization have versioning enabled. Which AWS service can evaluate the configuration of these buckets and report any bucket that does not meet this requirement?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SCS-C03

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by AWS. “SCS-C03” is a trademark of its owner, used for identification only.

Task 6.3: Evaluate the Compliance of AWS Resources SCS-C03 Practice Questions (Page 1)

Questions 1–5

A company needs to prepare for an audit by continuously collecting evidence of its AWS usage and controls. Which AWS service automates the collection of this evidence and organizes it into assessment reports?

A company's external auditor requires the company to provide AWS's SOC 2 Type II report and the Data Processing Addendum (DPA) as part of the audit evidence. The company does not have a Business Associate Agreement (BAA) with AWS. What should the compliance team do to obtain these documents?

A compliance officer wants to use AWS Audit Manager to collect evidence for a specific compliance framework. What is the first step they should take in AWS Audit Manager?

A security engineer needs to continuously verify that all Amazon S3 buckets in an organization have versioning enabled. Which AWS service can evaluate the configuration of these buckets and report any bucket that does not meet this requirement?

Keep studying — Content Domain 6: Security Foundations and Governance