AWS Certified Security - Specialty 安全专家 题库ExamShoot 公开版
需积分: 0 101 浏览量
2024-03-04
10:02:11
上传
评论
收藏 572KB PDF 举报
Wish You PASS The Exam \(@^O^@)/
1/50Thank you for choosing ExamShoot.com product!
AWS SCS C02 Exam Questions
Question: 1
Company A has an AWS account that is named Account A. Company A recently acquired Company B, which has
an AWS account that is named Account B. Company B stores its files in an Amazon S3 bucket. The administrators
need to give a user from Account A full access to the S3 bucket in Account B.
After the administrators adjust the IAM permissions for the user in Account A to access the S3 bucket in Account
B, the user still cannot access any files in the S3 bucket.
Which solution will resolve this issue?
Answer: C
A: In Account B, create a bucket ACL to allow the user from Account A to access the S3 bucket in Account B.
B: In Account B, create an object ACL to allow the user from Account A to access all the objects in the S3
bucket in Account B.
C: In Account B, create a bucket policy to allow the user from Account A to access the S3 bucket in Account B.
D: In Account B, create a user policy to allow the user from Account A to access the S3 bucket in Account B.
Question: 2
A company has a guideline that mandates the encryption of all Amazon S3 bucket data in transit. A security
engineer must implement an S3 bucket policy that denies any S3 operations if data is not encrypted.
Which S3 bucket policy will meet this requirement?
Answer: B
A: <img src="https://cache.madadm.com/wx_madadm_com/images/2024/1/31/img_17067290832270.png">
<br>
B: <img src="https://cache.madadm.com/wx_madadm_com/images/2024/1/31/img_17067290833611.png">
<br>
C: <img src="https://cache.madadm.com/wx_madadm_com/images/2024/1/31/img_17067290834432.png">
<br>
D: <img src="https://cache.madadm.com/wx_madadm_com/images/2024/1/31/img_17067290836613.png">
Question: 3
A security engineer wants to use Amazon Simple Notification Service (Amazon SNS) to send email alerts to a
company's security team for Amazon GuardDuty findings that have a High severity level. The security engineer
also wants to deliver these findings to a visualization tool for further examination.
Which solution will meet these requirements?
A: Set up GuardDuty to send notifications to an Amazon CloudWatch alarm with two targets in CloudWatch.
From CloudWatch, stream the findings through Amazon Kinesis Data Streams into an Amazon Open Search
Service domain as the first target for delivery. Use Amazon QuickSight to visualize the findings. Use
OpenSearch queries for further analysis. Deliver email alerts to the security team by configuring an SNS topic
as a second target for the CloudWatch alarm. Use event pattern matching with an Amazon EventBridge event
rule to send only High severity findings in the alerts.
剩余22页未读，继续阅读
资源评论
