AWS Certified Security – Specialty Free Practice Exam Questions

457 real AWS Certified Security – Specialty exam questions with answers and AI explanations. Amazon Web Services certification prep — page 11 of 46.

  1. Question 106: A Security Engineer is asked to update an AWS CloudTrail log file prefix for an existing trail. When attempting to save the change in the CloudTrail console, t…
  2. Question 107: A Developer is creating an AWS Lambda function that requires environment variables to store connection information and logging settings. The Developer is requi…
  3. Question 108: An Application team has requested a new AWS KMS master key for use with Amazon S3, but the organizational security policy requires separate master keys for dif…
  4. Question 109: A global company must mitigate and respond to DDoS attacks at Layers 3, 4 and 7. All of the company's AWS applications are serverless with static content hoste…
  5. Question 110: A recent security audit found that AWS CloudTrail logs are insufficiently protected from tampering and unauthorized access. Which actions must the Security Eng…
  6. Question 111: A company requires that SSH commands used to access its AWS instance be traceable to the user who executed each command. How should a Security Engineer accompl…
  7. Question 112: A company uses Microsoft Active Directory for access management for on-premises resources, and wants to use the same mechanism for accessing its AWS accounts.…
  8. Question 113: A company wants to encrypt the private network between its on-premises environment and AWS. The company also wants a consistent network experience for its empl…
  9. Question 114: A company's Security Engineer has been tasked with restricting a contractor's IAM account access to the company's Amazon EC2 console without providing access t…
  10. Question 115: A Security Engineer signed in to the AWS Management Console as an IAM user and switched to the security role IAM role. To perform a maintenance operation, the…