Implement a secure and consistent deployment strategy for cloud resources.
5 practice questions under this official exam objective (SCS-C02, SCS-C03) — each with the community-verified answer, a full option-by-option explanation and instant feedback.
Deploy security patches immediately with a 0-day baseline and Patch Now, logging to S3 for evidence
A media company needs to push security patches to its EC2 fleet on demand during an incident and prove they were applied. The solution is to set a pat
Use Systems Manager Patch Manager to find missing patches and automate remediation
A security engineer must identify EC2 Linux instances missing patches (from reported CVEs) and automatically apply the correct patches. AWS Systems Ma
Use AWS Service Catalog with CloudFormation and enforce tagging with AWS Config rules
To deploy approved architectural patterns via CloudFormation across org accounts while enforcing tagging and configuration guidelines, use AWS Service
Share CloudFormation StackSets from an admin account and use SCPs to block non-compliant provisioning
Three deployment mandates: EC2 only from approved accounts, DynamoDB with standardized naming, and all infrastructure via CloudFormation. Use AWS Clou
How should a secured S3 CloudFormation template be shared across AWS Organizations?
A secured Amazon S3 CloudFormation template must be distributed to every account in an AWS Organization so end users can deploy standardized buckets.