Prescribe security controls.
27 practice questions under this official exam objective (SAP-C02), each with the answer key, an option-by-option explanation and instant feedback.
Questions under this objective
27 total · page 2 of 2Use a KMS multi-Region key so one key material encrypts in every Region
An application uses AWS KMS to encrypt data before writing it to an S3 bucket, and the bucket is replicated to other Regions. The application must dec
Use an organization CloudTrail trail in the management account instead of per-account trai
A company is planning a migration to AWS Cloud and will use multiple accounts managed in an AWS Organization, creating a few accounts at first and add
Scan Lambda packages with Inspector and exclude untagged functions from code scanning
A company has Python Lambda functions deployed as .zip packages with a shared Lambda layer also in .zip, both stored in S3. It must automatically scan
Aggregate organisation audit activity in CloudTrail Lake and query it with SQL
A company has multiple AWS accounts inside an AWS Organization and needs to store account activity in a central location and query that data using SQL
Scope S3 access per user with a session-tag condition and audit access with CloudTrail dat
A company wants a single S3 bucket for work documents, authenticates all users through AWS IAM Identity Center, and has a data scientist group. Each d
Publish the environment as a Service Catalog product with a launch constraint
A QA department needs to launch many short-lived test environments from an existing CloudFormation template, currently done by one manager using a rol
Replace GitHub Actions long-lived keys with an OIDC identity provider and IAM role
A company runs CI/CD pipelines with GitHub Actions that authenticate to AWS using an IAM user secret key. Security now requires that pipelines stop us