Question 1
A security engineer needs continuous monitoring for malicious or unauthorized behavior across AWS accounts and S3 data, leveraging machine learning and threat intelligence. Which service should be enabled organization-wide?
Correct Answer:
Amazon GuardDuty
Question 2
GuardDuty has produced a high-severity finding for a compromised EC2 instance generating cryptocurrency-mining traffic. Which sequence best preserves forensic evidence while stopping the threat?
Correct Answer:
Snapshot the EBS volumes, isolate the instance with a quarantine security group, then capture a memory dump before stopping it
Question 3
A team wants to scan running EC2 instances, container images in ECR, and Lambda functions for OS, language-package, and code vulnerabilities, using a single managed service. Which service provides this?
Correct Answer:
Amazon Inspector
Question 4
Security Hub aggregates findings across accounts. The team wants every new CRITICAL finding to automatically open a ticket in their ITSM system and trigger a Lambda remediation. Which integration approach is recommended?
Correct Answer:
Use EventBridge to match Security Hub Findings - Imported events with severity CRITICAL and route to multiple targets
Question 5
A SOC analyst needs to investigate the relationships between an IAM principal, an EC2 instance, and external IP addresses involved in a GuardDuty finding. Which AWS service is purpose-built for this graph-based investigation?
Correct Answer:
Amazon Detective
Question 1
Exam overview

About this Exam

Prepare with the AWS Security Specialty (SCS-C03) Practice Questions - AWS Certified Security - Specialty (SCS-C03) Exam practice quiz. This question bank includes 100 questions covering team, security, needs, service, and feature. Use it to review important concepts, identify knowledge gaps, and build confidence for the related exam, course, or assessment.

More details

Additional Information

AWS Security Specialty (SCS-C03) Practice Questions - AWS Certified Security - Specialty (SCS-C03) Exam

This practice set contains 100 questions from the matching question bank and focuses on team, security, needs, service, and feature. Work through each question carefully, review the provided solutions, and revisit topics that need more study before your next attempt.

This is an independent study resource intended for practice and review; it is not an official examination or an endorsement by any organization named in the title.

Quiz information

Frequently Asked Questions

The complete question count is available after full access is unlocked.
No fixed duration is currently configured for this quiz.
Question explanations are included where they are available in the quiz content, helping you review the reasoning after answering.
Yes. You can retake the practice test again as you continue studying during your available access period.
After your access is confirmed, you can continue into the complete practice exam from this quiz flow.
Unless explicitly stated otherwise, this page provides independent practice material for study and exam preparation and is not the official examination itself.
Keep studying

Related Questions