Skip to content

Amazon SCS-C02

AWS Certified Security - Specialty

Verified practice questions with detailed answers, clear explanations, and community discussion.

  • 307

    questions

  • 2 days ago

    last updated

  • 4.8/5

    overall rating

Question 1 of 307

A company has an AWS Lambda function that creates image thumbnails from larger images. The Lambda function needs read and write access to an Amazon S3 bucket in the same AWS account.

Which solutions will provide the Lambda function this access? (Choose two.)

Answer choices
Show answer

Correct answers: C, D

To provide AWS Lambda with access to an Amazon S3 bucket, the best solutions involve using IAM roles. Creating an IAM role for the Lambda function and attaching an IAM policy that allows access to the S3 bucket ensures that the Lambda function has the necessary permissions without exposing any secrets or keys. Additionally, attaching a bucket policy to the S3 bucket that specifies the IAM role as the principal provides a clear and secure way to control access through the IAM role.

Community votes

14 votes

CDSuggested

100%

Question 2 of 307

A security engineer is configuring a new website that is named example.com. The security engineer wants to secure communications with the website by requiring users to connect to example.com through HTTPS.

Which of the following is a valid option for storing SSL/TLS certificates?

Answer choices
Show answer

Correct answer: C

AWS Certificate Manager (ACM) is specifically designed for managing and deploying SSL/TLS certificates on AWS services. It simplifies the process of provisioning, managing, and deploying SSL/TLS certificates. Using a custom SSL certificate that is stored in ACM is a valid and recommended option for securing communications with the website through HTTPS.

Community votes

12 votes

CSuggested

100%

Question 3 of 307

A security engineer needs to develop a process to investigate and respond to potential security events on a company's Amazon EC2 instances. All the EC2 instances are backed by Amazon Elastic Block Store (Amazon EBS). The company uses AWS Systems Manager to manage all the EC2 instances and has installed Systems Manager Agent (SSM Agent) on all the EC2 instances.

The process that the security engineer is developing must comply with AWS security best practices and must meet the following requirements:

A compromised EC2 instance's volatile memory and non-volatile memory must be preserved for forensic purposes.

A compromised EC2 instance's metadata must be updated with corresponding incident ticket information.

A compromised EC2 instance must remain online during the investigation but must be isolated to prevent the spread of malware.

Any investigative activity during the collection of volatile data must be captured as part of the process.

Which combination of steps should the security engineer take to meet these requirements with the LEAST operational overhead? (Choose three.)

Answer choices
Show answer

Correct answers: A, C, E

To develop a process to investigate and respond to potential security events while complying with AWS best practices, the security engineer should take the following steps. First, gather any relevant metadata for the compromised EC2 instance, enable termination protection, isolate the instance by updating its security groups to restrict access, and detach the instance from any Auto Scaling groups it is part of to prevent it from being terminated or replaced. This ensures the instance remains online but isolated. Second, use Systems Manager Run Command to invoke scripts that collect volatile data. This method is optimal as it minimizes operational overhead and ensures all activities during data collection are captured. Third, create a snapshot of the compromised EC2 instance's EBS volume for follow-up investigations and tag the instance with any relevant metadata and incident ticket information. Creating a snapshot preserves the compromised instance's non-volatile memory for forensic purposes. Together, these steps effectively manage the investigation with minimal operational overhead while preserving both volatile and non-volatile data.

Community votes

33 votes

ACESuggested

100%

Question 4 of 307

A company has an organization in AWS Organizations. The company wants to use AWS CloudFormation StackSets in the organization to deploy various AWS design patterns into environments. These patterns consist of Amazon EC2 instances, Elastic Load Balancing (ELB) load balancers, Amazon RDS databases, and Amazon Elastic Kubernetes Service (Amazon EKS) clusters or Amazon Elastic Container Service (Amazon ECS) clusters.

Currently, the company’s developers can create their own CloudFormation stacks to increase the overall speed of delivery. A centralized CI/CD pipeline in a shared services AWS account deploys each CloudFormation stack.

The company's security team has already provided requirements for each service in accordance with internal standards. If there are any resources that do not comply with the internal standards, the security team must receive notification to take appropriate action. The security team must implement a notification solution that gives developers the ability to maintain the same overall delivery speed that they currently have.

Which solution will meet these requirements in the MOST operationally efficient way?

Answer choices
Show answer

Correct answer: B

To meet the company's requirements of notifying the security team while maintaining the same overall delivery speed, the most operationally efficient solution is to use Amazon Simple Notification Service (SNS) and CloudFormation Guard. Creating a custom rule in CloudFormation Guard allows compliance checks for resource configurations. This ensures that any non-compliant resources are identified before deployment, and the CI/CD pipeline can notify the security team via SNS. The use of CloudFormation Guard is more effective for compliance checks compared to aws cloudformation validate-template, which only checks for syntax errors. This approach integrates seamlessly into the existing CI/CD pipeline, ensuring no delay in the delivery speed.

Community votes

24 votes

BSuggested

75%

A

25%

Question 5 of 307

A company is migrating one of its legacy systems from an on-premises data center to AWS. The application server will run on AWS, but the database must remain in the on-premises data center for compliance reasons. The database is sensitive to network latency. Additionally, the data that travels between the on-premises data center and AWS must have IPsec encryption.

Which combination of AWS solutions will meet these requirements? (Choose two.)

Answer choices
Show answer

Correct answers: A, B

To meet the requirements of migrating the application server to AWS while keeping the database on-premises with low latency and IPsec encryption, a combination of AWS Site-to-Site VPN and AWS Direct Connect is appropriate. AWS Site-to-Site VPN provides IPsec encryption for secure data transfer, while AWS Direct Connect offers a dedicated network connection for minimizing network latency, making this combination suitable for the scenario.

Community votes

12 votes

ABSuggested

100%

302 questions still locked

Your preview covered the first 5 questions. Unlock the rest to see every explanation and discussion thread, updated weekly

View plans

Choose your plan

Single payment · No subscription · No hidden fees

Standard

For a focused sprint before your exam date

$25USD

30 days of access, single payment

  • All 307 questions unlocked
  • Detailed answer explanations
  • Community discussions and votes
  • Weekly question updates
  • Printable PDF download
  • 100% refund if you do not pass

Premium

Extra runway, the PDF, and the refund guarantee

$35$60USD

90 days of access, single payment

Printable PDF download

Save every question as a PDF for offline study or printing.

  • All 307 questions unlocked
  • Detailed answer explanations
  • Community discussions and votes
  • Weekly question updates

Full refund if you do not pass

Send us your exam result and we refund the purchase.

Stories from the certified

May 11, 2026
As this was my first certification exam, I was understandably nervous about what to expect. These study materials made the preparation process much easier, and many of the questions closely reflected those on the actual exam.
Charles Sirois
Canada
May 5, 2026
Wasted about a month going through the free dump sites scattered all over reddit, half the answers were wrong and the other half were for a version of the exam that doesn't even exist anymore. Eventually gave in and paid the small fee here, and the difference was night and day.
Lance Chambers
United States
Apr 11, 2026
Honestly, I had already gone through the official documentation quite thoroughly, but still didn't feel fully confident going in. This helped things finally click for me. I realized I knew the material, but just hadn't connected all the pieces yet.
Alisha Kelly
Italy
Apr 9, 2026
Used this along with Microsoft Learn and the combo worked really well. The practice questions made the stuff I'd read actually stick. Passed first attempt, no complaints from me.
Casper Claassen
Netherlands
Jun 2, 2025
The content is accurate and clearly presented, and it's more affordable than competitors. The team has been incredibly responsive whenever I've had an issue, and they've been open to small changes that improve the platform.
Gabriele Ghesla
Italy
May 11, 2026
As this was my first certification exam, I was understandably nervous about what to expect. These study materials made the preparation process much easier, and many of the questions closely reflected those on the actual exam.
Charles Sirois
Canada
May 5, 2026
Wasted about a month going through the free dump sites scattered all over reddit, half the answers were wrong and the other half were for a version of the exam that doesn't even exist anymore. Eventually gave in and paid the small fee here, and the difference was night and day.
Lance Chambers
United States
Apr 11, 2026
Honestly, I had already gone through the official documentation quite thoroughly, but still didn't feel fully confident going in. This helped things finally click for me. I realized I knew the material, but just hadn't connected all the pieces yet.
Alisha Kelly
Italy
Apr 9, 2026
Used this along with Microsoft Learn and the combo worked really well. The practice questions made the stuff I'd read actually stick. Passed first attempt, no complaints from me.
Casper Claassen
Netherlands
Jun 2, 2025
The content is accurate and clearly presented, and it's more affordable than competitors. The team has been incredibly responsive whenever I've had an issue, and they've been open to small changes that improve the platform.
Gabriele Ghesla
Italy
Apr 13, 2026
I don't usually leave reviews, but this one felt worth sharing. The questions were quite close to what actually appeared on the exam, more than I expected. I spent about a week going through the material before my test, and it helped me feel more prepared.
Morgan Farmer
United Kingdom
May 4, 2026
Passed ITIL 4 Foundation with 87%. Material was enough by itself.
Remi Nuyts
United States
Apr 9, 2026
I had a smooth experience from start to finish. Access was available right away, no technical issues, which made it easy to get started. The content felt relevant and aligned well with what I was looking for.
Archie Hopkins
United States
Apr 11, 2026
Does what it says it does. Content felt solid, nothing confusing to navigate and I didn't run into any weird issues. I been putting off scheduling the exam for a while and going through this gave me enough confidence to finally book it and pass.
Nancy Mcbride
United States
May 8, 2026
A very quick response was received via email when a link issue occurred. The study materials provided were high quality and extremely helpful. I was able to complete the test successfully. Many thanks for the excellent support.
Neil Savage
United States
Apr 13, 2026
I don't usually leave reviews, but this one felt worth sharing. The questions were quite close to what actually appeared on the exam, more than I expected. I spent about a week going through the material before my test, and it helped me feel more prepared.
Morgan Farmer
United Kingdom
May 4, 2026
Passed ITIL 4 Foundation with 87%. Material was enough by itself.
Remi Nuyts
United States
Apr 9, 2026
I had a smooth experience from start to finish. Access was available right away, no technical issues, which made it easy to get started. The content felt relevant and aligned well with what I was looking for.
Archie Hopkins
United States
Apr 11, 2026
Does what it says it does. Content felt solid, nothing confusing to navigate and I didn't run into any weird issues. I been putting off scheduling the exam for a while and going through this gave me enough confidence to finally book it and pass.
Nancy Mcbride
United States
May 8, 2026
A very quick response was received via email when a link issue occurred. The study materials provided were high quality and extremely helpful. I was able to complete the test successfully. Many thanks for the excellent support.
Neil Savage
United States

Before you buy

Answers about access, updates, payments, and the refund policy.

01Are these real exam questions?

Our Amazon SCS-C02 questions are based on real exam experiences and are continuously updated to match the current exam format. Most candidates who study with us report passing on their first attempt, based on a self reported post exam survey.

02What happens if I don't pass the exam?

With our Premium package, you get a 100% money back guarantee. If you don't pass your exam after studying with our materials, simply contact us with your exam results and we'll refund your purchase. Terms and conditions apply, read our full refund policy to learn more.

03How often are the questions updated?

Our question bank is updated regularly based on feedback from recent exam takers. We typically review and update our content every week with reports about new questions or changes to the exam format.

04Can I extend my access period?

Yes. When your access is close to expiring, you can renew it for another 30 days directly from the exam page. If you need more time while you are still preparing, reach out and we will help.

05Is this a single payment or a subscription?

This is a single payment with no recurring charges. Once you purchase, you get full access to all exam questions for the duration of your package (30 days for Standard, 90 days for Premium). No hidden fees or automatic renewals.

06How many questions are included?

You get access to all 307 questions in our database for the Amazon SCS-C02 exam. This includes detailed explanations and answer justifications to help you understand the concepts thoroughly.

07Do you offer technical support?

Yes. Email us at hello@examice.com for help with access, billing, or the platform. We read every message and typically reply within 24 hours on business days.

08Is my payment secure?

Absolutely! We use industry standard SSL encryption and process all payments through Stripe, a trusted payment processor used by millions of businesses worldwide. Your payment and personal information are completely secure.

Ready to unlock the rest

All 307 questions from $25, single payment, instant access.

Back to plans