~/aws-scs-c03 · study ▊

practice sheet · all objectives switch to smart practice →

AWS Certified Security - Specialty

0/125 checked

Q_01 domain/d1 · medium single discuss →

A security team enables Amazon GuardDuty in a Region but does not enable any additional protection plans. Which attack sequence detection can GuardDuty still perform using only foundational data sources?

A Detection of cryptomining processes running inside EKS containers
B Detection of data exfiltration from an S3 bucket after the bucket becomes overly permissive
C Detection of an attack sequence starting from IAM privilege discovery activity on Amazon S3 APIs, followed by S3 control plane alterations that make a bucket policy more permissive
D Detection of malicious runtime behavior within ECS Fargate containers

Q_02 domain/d1 · medium single discuss →

A security engineer notices that certain older GuardDuty findings are being excluded when GuardDuty builds attack sequence findings. What behavior of Extended Threat Detection explains this, and what should the engineer review?

A Extended Threat Detection ignores archived findings, including those auto-archived by suppression rules, so the engineer should review existing suppression rules
B Extended Threat Detection only correlates events within a 1-hour window, so the engineer should adjust the correlation window
C Extended Threat Detection excludes weak signals by design, so the engineer should manually promote them to findings
D Extended Threat Detection requires findings to be exported to S3 first, so the engineer should configure a publishing destination

Q_03 domain/d1 · medium multi

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

Q_04 domain/d1 · medium single

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

Q_05 domain/d1 · medium single

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

Q_06 domain/d1 · medium single

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

Q_07 domain/d1 · medium single

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

Q_08 domain/d1 · medium single

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

Q_09 domain/d1 · medium single

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

Q_10 domain/d1 · medium single

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

Q_11 domain/d1 · medium single

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

Q_12 domain/d1 · medium single

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

Q_13 domain/d1 · medium single

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

Q_14 domain/d1 · medium single

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

Q_15 domain/d1 · medium multi

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

Q_16 domain/d1 · medium multi

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

Q_17 domain/d1 · medium single

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

Q_18 domain/d2 · medium single

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

Q_19 domain/d2 · medium single

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

Q_20 domain/d2 · medium single

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

Q_21 domain/d2 · medium single

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

Q_22 domain/d2 · medium single

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

Q_23 domain/d2 · medium single

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

Q_24 domain/d2 · medium single

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

Q_25 domain/d2 · medium single

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

Q_26 domain/d2 · medium single

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

Q_27 domain/d2 · medium single

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

Q_28 domain/d2 · medium single

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

Q_29 domain/d2 · medium single

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

Q_30 domain/d2 · medium single

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

Q_31 domain/d2 · medium single

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

Q_32 domain/d2 · medium single

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

Q_33 domain/d2 · medium single

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

Q_34 domain/d2 · medium single

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

Q_35 domain/d2 · medium single

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

Q_36 domain/d2 · medium multi

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

Q_37 domain/d2 · medium single

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

Q_38 domain/d2 · medium multi

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

Q_39 domain/d3 · medium single

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

Q_40 domain/d3 · medium single

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

Q_41 domain/d3 · medium single

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

Q_42 domain/d3 · medium single

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

Q_43 domain/d3 · medium single

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

Q_44 domain/d3 · medium single

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

Q_45 domain/d3 · medium single

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

Q_46 domain/d3 · medium single

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

Q_47 domain/d3 · medium multi

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

Q_48 domain/d3 · medium single

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

Q_49 domain/d3 · medium single

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

Q_50 domain/d3 · medium single

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

Q_51 domain/d3 · medium single

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

Q_52 domain/d3 · medium single

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

Q_53 domain/d3 · medium single

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

Q_54 domain/d3 · medium single

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

Q_55 domain/d3 · medium multi

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

Q_56 domain/d3 · medium multi

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

Q_57 domain/d3 · medium multi

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

Q_58 domain/d3 · medium single

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

Q_59 domain/d3 · medium single

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

Q_60 domain/d3 · medium single

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

Q_61 domain/d3 · medium single

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

Q_62 domain/d3 · medium single

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

Q_63 domain/d3 · medium single

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

Q_64 domain/d3 · medium single

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

Q_65 domain/d4 · medium single

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

Q_66 domain/d4 · medium single

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

Q_67 domain/d4 · medium single

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

Q_68 domain/d4 · hard single

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

Q_69 domain/d4 · medium single

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

Q_70 domain/d4 · medium single

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

Q_71 domain/d4 · medium single

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

Q_72 domain/d4 · medium single

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

Q_73 domain/d4 · medium single

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

Q_74 domain/d4 · medium single

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

Q_75 domain/d4 · medium single

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

Q_76 domain/d4 · medium single

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

Q_77 domain/d4 · medium single

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

Q_78 domain/d4 · medium single

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

Q_79 domain/d4 · medium multi

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

Q_80 domain/d4 · medium single

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

Q_81 domain/d4 · medium single

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

Q_82 domain/d4 · medium single

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

Q_83 domain/d4 · medium single

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

Q_84 domain/d4 · medium single

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

Q_85 domain/d4 · medium single

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

Q_86 domain/d4 · medium single

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

Q_87 domain/d4 · medium single

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

Q_88 domain/d4 · medium single

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

Q_89 domain/d4 · medium single

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

Q_90 domain/d4 · medium single

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

Q_91 domain/d4 · medium single

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

Q_92 domain/d4 · medium single

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

Q_93 domain/d4 · medium multi

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

Q_94 domain/d5 · medium multi

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

Q_95 domain/d5 · medium multi

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

Q_96 domain/d5 · medium single

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

Q_97 domain/d5 · medium single

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

Q_98 domain/d5 · medium single

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

Q_99 domain/d5 · medium single

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

Q_100 domain/d5 · medium single

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

Q_101 domain/d5 · medium single

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

Q_102 domain/d5 · medium single

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

Q_103 domain/d5 · medium single

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

Q_104 domain/d5 · medium single

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

Q_105 domain/d5 · medium multi

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

Q_106 domain/d6 · medium single

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

Q_107 domain/d6 · medium multi

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

Q_108 domain/d6 · medium single

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

Q_109 domain/d6 · medium single

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

Q_110 domain/d6 · medium single

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

Q_111 domain/d6 · medium multi

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

Q_112 domain/d6 · medium single

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

Q_113 domain/d6 · medium single

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

Q_114 domain/d6 · medium single

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

Q_115 domain/d6 · medium single

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

Q_116 domain/d6 · medium single

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

Q_117 domain/d6 · medium single

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

Q_118 domain/d6 · medium single

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

Q_119 domain/d6 · medium single

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

Q_120 domain/d6 · medium single

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

Q_121 domain/d6 · medium single

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

Q_122 domain/d6 · medium single

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

Q_123 domain/d6 · medium single

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

Q_124 domain/d6 · medium single

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

Q_125 domain/d6 · medium single

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

123 questions locked

unlock all 123 questions