AWS Certified Security – Specialty Free Practice Exam Questions

457 real AWS Certified Security – Specialty exam questions with answers and AI explanations. Amazon Web Services certification prep — page 17 of 46.

Question 170: A company has a VPC with an IPv6 address range and a public subnet with an IPv6 address block. The VPC currently hosts some public Amazon EC2 instances, but a…
Question 171: An ecommerce website was down for 1 hour following a DDoS attack. Users were unable to connect to the website during the attack period. The ecommerce company's…
Question 172: A company's on-premises data center forwards DNS logs to a third-party security incident events management (SIEM) solution that alerts on suspicious behavior.…
Question 173: A company has a serverless application for internal users deployed on AWS. The application uses AWS Lambda for the front end and for business logic. The Lambda…
Question 174: A company has a forensic logging use case whereby several hundred applications running on Docker on EC2 need to send logs to a central location. The Security E…
Question 175: A company manages multiple AWS accounts using AWS Organizations. The company's security team notices that some member accounts are not sending AWS CloudTrail l…
Question 176: A company wants to deploy an application in a private VPC that will not be connected to the internet. The company's security team will not allow bastion hosts…
Question 177: A company uses multiple AWS accounts managed with AWS Organizations. Security engineers have created a standard set of security groups for all these. accounts.…
Question 178: A developer reported that AWS CloudTrail was disabled on their account. A security engineer investigated the account and discovered the event was undetected by…
Question 179: A company's data lake uses Amazon S3 and Amazon Athena. The company's security engineer has been asked to design an encryption solution that meets the company'…