1
Single choice~120s
A company with many accounts under AWS Organizations must capture all management-event API activity from every account into a central, consistent audit trail. What is the most efficient way to do this?
AWS Certified Security – Specialty
AWS_SCS_C02Ready to test yourself?
A timed, blueprint-proportional exam drawn fresh from this bank — with a per-domain score report.
🔓 Free preview: showing 10 of 100 questions. Unlock the full bank — every question, explanation, and reference.
Unlock all 100 questions →10 questions across 6 topics. Choose an answer for each question, then check it to see the correct answer and explanation.
Filter by topic
5 questions in Security Logging and Monitoring
LOGGING_MONITORING
Security Logging and Monitoring
5 questions in topicDesign and implement logging, monitoring, and alerting for security.
2
Single choice~130s
Security policy requires an alert whenever the root user signs in or makes API calls. CloudTrail delivers events to CloudWatch Logs. How should the engineer implement the alert?
3
Single choice~120s
A security analyst must investigate whether an EC2 instance communicated with a suspicious external IP address, including which ports and whether traffic was accepted or rejected. Which log source provides this?
4
Single choice~120s
A compliance team must maintain a continuous record of AWS resource configuration changes and evaluate resources against security rules (for example, 'no security group allows 0.0.0.0/0 on port 22'). Which service provides this?
5
Single choice~130s
An auditor requires assurance that CloudTrail log files stored in S3 have not been modified or deleted after delivery. Which combination best provides tamper-evident logs?