Task 6.2: Implement a Secure and Consistent Deployment Strategy for Cloud Resources SCS-C03 Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   What is the primary purpose of AWS Service Catalog?

   • ATo automatically patch all EC2 instances
   • BTo monitor the performance of deployed applications
   • CTo store and version control CloudFormation templates
   • DTo create and manage a portfolio of approved IT services that users can deploy
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   A company uses Terraform to manage its AWS infrastructure. What is a best practice for securely integrating Terraform with AWS?

   • ADisable CloudTrail for the Terraform user to reduce log noise
   • BUse IAM roles and temporary credentials for Terraform operations
   • CUse long-term IAM user access keys for all Terraform operations
   • DStore AWS access keys in the Terraform configuration files for easy use
   Reveal Solution Discussion Select an answer first
4. 18foundation · easy

   What is a key benefit of using AWS CloudFormation StackSets for deploying security resources across an organization?

   • AIt automatically remediates any security misconfigurations in existing resources
   • BIt provides a real-time dashboard of all security findings across the organization
   • CIt allows you to share resources between accounts without duplication
   • DIt ensures that the same infrastructure is deployed consistently across selected accounts and regions
   Reveal Solution Discussion Select an answer first
5. 19foundation · easy

   What is a key benefit of using AWS Resource Access Manager (RAM) to share resources?

   • AIt provides a central dashboard for all security findings
   • BIt allows you to share IAM roles across accounts
   • CIt reduces the need to duplicate resources across accounts, lowering management overhead
   • DIt automatically encrypts all shared resources
   Reveal Solution Discussion Select an answer first
6. 20application · medium

   A company is migrating from manual console-based resource creation to Infrastructure as Code (IaC). The security team wants to ensure that the IaC templates are reviewed for security issues before deployment and that the deployment process is repeatable. Which practice is MOST aligned with this goal?

   • AStore templates in a version-controlled repository, run cfn-lint and CloudFormation Guard in CI/CD, and deploy via CloudFormation.
   • BUse AWS Service Catalog to create products and allow users to launch them without any additional checks.
   • CStore templates on a shared network drive and have a senior engineer review them before manual deployment.
   • DUse AWS Config to detect non-compliant resources after deployment and manually fix them.
   Reveal Solution Discussion Select an answer first