Question 1
A security team needs to detect potentially malicious activity in their AWS environment, including compromised EC2 instances and unauthorized API calls. Which AWS service should they enable?
Correct Answer:
Amazon GuardDuty
Question 2
GuardDuty detected suspicious API calls from a compromised IAM user credential. The security team wants to automatically block access from the source IP and revoke the IAM user active sessions. What is the recommended approach?
Correct Answer:
Use Amazon EventBridge to trigger a Lambda function that adds the IP to an NACL deny rule and revokes active sessions
Question 3
A company uses GuardDuty to monitor their multi-account AWS environment. They need to aggregate all GuardDuty findings to a central security account for analysis. Which configuration should they use?
Correct Answer:
Use GuardDuty administrator account with member accounts
Question 4
Which data sources does GuardDuty use by default when enabled for an AWS account?
Correct Answer:
VPC Flow Logs, CloudTrail management events, and Route 53 DNS query logs
Question 5
A security team needs a centralized dashboard to view security findings from multiple AWS security services including GuardDuty, Inspector, and Macie, as well as check compliance against security standards. Which service should they use?
Correct Answer:
AWS Security Hub
Question 1
Exam overview

About this Exam

Prepare with the AWS Security Specialty Practice Questions - AWS Certified Security - Specialty (SCS-C02) Exam practice quiz. This question bank includes 100 questions covering security, needs, team, service, and company. Use it to review important concepts, identify knowledge gaps, and build confidence for the related exam, course, or assessment.

More details

Additional Information

AWS Security Specialty Practice Questions - AWS Certified Security - Specialty (SCS-C02) Exam

This practice set contains 100 questions from the matching question bank and focuses on security, needs, team, service, and company. Work through each question carefully, review the provided solutions, and revisit topics that need more study before your next attempt.

This is an independent study resource intended for practice and review; it is not an official examination or an endorsement by any organization named in the title.

Quiz information

Frequently Asked Questions

The complete question count is available after full access is unlocked.
No fixed duration is currently configured for this quiz.
Question explanations are included where they are available in the quiz content, helping you review the reasoning after answering.
Yes. You can retake the practice test again as you continue studying during your available access period.
After your access is confirmed, you can continue into the complete practice exam from this quiz flow.
Unless explicitly stated otherwise, this page provides independent practice material for study and exam preparation and is not the official examination itself.
Keep studying

Related Questions