Implement a secure and consistent deployment strategy for cloud resources.
6 practice questions under this official exam objective (SCS-C02, SCS-C03), each with the answer key, an option-by-option explanation and instant feedback.
Questions under this objective
6 total · page 1 of 1Deploy security patches immediately with a 0-day baseline and Patch Now, logging to S3 for
A media company needs to push security patches to its EC2 fleet on demand during an incident and prove they were applied. The solution is to set a pat
Use Systems Manager Patch Manager to find missing patches and automate remediation
A security engineer must identify EC2 Linux instances missing patches (from reported CVEs) and automatically apply the correct patches. AWS Systems Ma
Use AWS Service Catalog with CloudFormation and enforce tagging with AWS Config rules
To deploy approved architectural patterns via CloudFormation across org accounts while enforcing tagging and configuration guidelines, use AWS Service
Share CloudFormation StackSets from an admin account and use SCPs to block non-compliant p
Three deployment mandates: EC2 only from approved accounts, DynamoDB with standardized naming, and all infrastructure via CloudFormation. Use AWS Clou
How to enforce a third-party WAF managed rule group across all accounts and Regions?
AWS WAF third-party managed rule groups can be enforced organization-wide through an AWS Firewall Manager WAF policy scoped to all accounts and Region
How should a secured S3 CloudFormation template be shared across AWS Organizations?
A secured Amazon S3 CloudFormation template must be distributed to every account in an AWS Organization so end users can deploy standardized buckets.