Task 6.3: Evaluate the Compliance of AWS Resources SCS-C03 Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   A company wants to use Amazon EventBridge to react to AWS Config compliance changes and trigger a custom workflow. What type of event does AWS Config emit that EventBridge can capture?

   • AS3 object created events
   • BEC2 instance state change events
   • CConfig Rules Compliance Change events
   • DCloudTrail API call events
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   A security engineer wants a quick, automated check to identify AWS accounts that have MFA not enabled on the root account. Which AWS service provides this specific best-practice check?

   • AAWS Well-Architected Tool
   • BAWS Audit Manager
   • CAWS Trusted Advisor
   • DAWS Artifact
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   A security engineer needs to receive an email whenever an AWS Config rule changes a resource's compliance state from compliant to noncompliant. Which AWS service can be used to send these notifications?

   • AAWS Trusted Advisor
   • BAWS CloudTrail
   • CAmazon Simple Notification Service (SNS)
   • DAmazon Simple Queue Service (SQS)
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   An AWS Config rule detects that an IAM role has an overly permissive policy. The security team wants AWS Config to automatically remove the offending policy statement. What must be configured to enable this automatic fix?

   • AA remediation action using an SSM automation document
   • BAn AWS Config conformance pack with a custom rule
   • CAn AWS Lambda function as the rule's source
   • DAn Amazon EventBridge rule that triggers a Lambda function
   Reveal Solution Discussion Select an answer first
6. 15application · easy

   A company's legal team needs to review the AWS Customer Agreement and the Service Level Agreement (SLA) for Amazon EC2. The company also wants to download the latest PCI DSS compliance report for AWS. What should the legal team use to obtain these documents?

   • AAWS Config to export the compliance status of the company's resources and send it to the legal team.
   • BAWS Artifact to download the AWS Customer Agreement, the EC2 SLA, and the PCI DSS report.
   • CAWS Support to request the AWS Customer Agreement, the EC2 SLA, and the PCI DSS report.
   • DAWS Audit Manager to generate the AWS Customer Agreement, the EC2 SLA, and the PCI DSS report.
   Reveal Solution Discussion Select an answer first