AWS Certified Security - Specialty SCS-C03

Here you have the best Amazon AWS Certified Security - Specialty SCS-C03 practice exam questions

  • You have 77 total questions across 16 pages (5 per page)
  • These questions were last updated on April 22, 2026
  • This site is not affiliated with or endorsed by Amazon.
Question 1 of 77

A security engineer is troubleshooting an AWS Lambda function that is named MyLambdaFunction. The function is encountering an error when the function attempts to read the objects in an Amazon S3 bucket that is named DOC-EXAMPLE-BUCKET. The S3 bucket has the following bucket policy:

Exam AWS Certified Security - Specialty SCS-C03: Image 1

Which change should the security engineer make to the policy to ensure that the Lambda function can read the bucket objects?

Answer

Suggested Answer

The suggested answer is C.

Community Votes2 votes
CSuggested
100%
Question 2 of 77

HOTSPOT -

A company is building a web application that needs to authenticate external users across multiple microservices that the company hosts on Amazon Elastic Container Service (Amazon ECS). The solution must use temporary credentials and minimize the management overhead required to maintain user databases.

Select and order the correct steps from the following list to implement a secure authentication strategy that meets these requirements. Select each step one time or not at all.

Configure Amazon Cognito user pools for user authentication.

Set up an IAM role for each microservice. Grant each role appropriate permissions.

Implement an Amazon API Gateway HTTP API with AWS Lambda authorizers to validate tokens before forwarding requests to microservices.

Create an Amazon DynamoDB table to store user credentials for each microservice.

Create an Amazon Cognito application client to interact with the web application.

Set up AWS IAM Identity Center to give users access to the microservices.

Exam AWS Certified Security - Specialty SCS-C03: Image 1
Answer

Suggested Answer

Question 3 of 77

An AWS account administrator created an IAM group and applied the following managed policy to require that each individual user authenticate using multi-factor authentication:

Exam AWS Certified Security - Specialty SCS-C03: Image 1

After implementing the policy, the administrator receives reports that users are unable to perform Amazon EC2 commands using the AWS CLI.

What should the administrator do to resolve this problem while still enforcing multi-factor authentication?

Answer

Suggested Answer

The suggested answer is B.

Community Votes1 vote
BSuggested
100%
Question 4 of 77

A company is using AWS Organizations with the default SCP. The company needs to restrict AWS usage for all AWS accounts that are in a specific OU.

Except for some desired global services, the AWS usage must occur only in the eu-west-1 Region for all accounts in the OU. A security engineer must create an SCP that applies the restriction to existing accounts and any new accounts in the OU.

Which SCP will meet these requirements?

Answer

Suggested Answer

The suggested answer is C.

Community Votes1 vote
CSuggested
100%
Question 5 of 77

HOTSPOT -

A security engineer needs to implement AWS IAM Identity Center with an exlemai identity provider (IdP).

Select and order the correct steps from the following list to meet this requirement. Select each step one time or not at all.

  • Configure the external IdP as the identity source in IAM Identity Center.
  • Obtain the SAML metadata from IAM Identity Center.
  • Obtain the SAML metadata from the external IdP.
  • Create an IAM role that has a trust policy that specifics the IdP's API endpoint.
  • Enable automatic provisioning in IAM Identity Center settings
  • Enable automatic provisioning in the external IdP.
Exam AWS Certified Security - Specialty SCS-C03: Image 1
Answer

Suggested Answer

About the Amazon AWS Certified Security - Specialty SCS-C03 Certification Exam

About the Exam

The Amazon AWS Certified Security - Specialty SCS-C03 (AWS Certified Security - Specialty SCS-C03) validates your knowledge and skills. Passing demonstrates proficiency and can boost your career prospects in the field.

How to Prepare

Work through all 77 practice questions across 16 pages. Focus on understanding the reasoning behind each answer rather than memorizing responses to be ready for any variation on the real exam.

Why Practice Exams?

Practice exams help you familiarize yourself with the question format, manage your time, and reduce anxiety on the test day. Our AWS Certified Security - Specialty SCS-C03 questions are regularly updated to reflect the latest exam objectives.