Design and implement security controls for compute workloads.
6 practice questions under this official exam objective (SCS-C02, SCS-C03), each with the answer key, an option-by-option explanation and instant feedback.
Questions under this objective
6 total · page 1 of 1Build a cost-effective DDoS-resilient architecture with Auto Scaling, ELB, and CloudFront+
A web app on EC2 serving static content from S3 needs a DDoS-resilient architecture at the lowest cost. Placing the EC2 fleet in an Auto Scaling group
Use ECS Exec to inspect a Fargate container with the least operational effort
A security engineer suspects malicious requests to an ECS Fargate service and needs to inspect the running container, retrieving log and memory-dump f
Replace SSH keys with Systems Manager Session Manager for secure admin access
A mixed Linux and Windows fleet in private subnets needs the most secure remote administration. Do not bake SSH-RSA keys into new instances; instead u
Enable GuardDuty EKS Audit Log Monitoring to detect unauthenticated EKS access with least
The company must detect unauthenticated access to existing EKS clusters with no additional EKS configuration and the least operational effort. Amazon
How to Provide Keyless SSH Access to EC2 and On-Premises Servers?
AWS Systems Manager Session Manager provides keyless, temporary shell access to EC2 instances and on-premises servers without opening inbound SSH port
Deploy the tokenization code on AWS Nitro Enclaves for an isolated, attestable environment
Credit-card tokenization must run in an isolated environment that other application components cannot reach, handling encryption, storage, decryption,