FirstTry
SCS-C03AWS Certified Security Specialty

Practice Exam 1

5 of this form’s 65 questions, drawn from across its domains, free. The explanation on every one of them is free too, at every tier, and always will be.

  1. Question 1 of 5

    Identity and Access Management

    A bucket policy in account 222222222222 grants s3:GetObject to a role in account 111111111111. The role's identity policy is silent on that bucket. What must change?

  2. Question 2 of 5

    Security Logging and Monitoring

    Rejected traffic to a host is plainly visible in the raw flow log group, yet the query below returns no rows.

    fields @timestamp, srcAddr, dstAddr, action| filter dstaddr = "10.0.4.19" and action = "REJECT"| sort @timestamp desc| limit 20

    What is wrong with the query?

  3. Question 3 of 5

    Data Protection

    A team's account has block public access turned on and one of its buckets has it turned off. Which settings apply to that bucket?

  4. Question 4 of 5

    Management and Security Governance

    How does AWS Control Tower implement its detective controls?

  5. Question 5 of 5

    Infrastructure Security

    A public API behind an Application Load Balancer is being hit by a flood of requests from many addresses, all requesting the same expensive endpoint. Which control addresses this most directly?

0 of 65 completed

0%

The other 60 questions are the rest of this form: same 170 minute clock, same 750 cut score, and the same explanation on every question, which is never behind the wall. Practice Exam 1 of 3 on Security Specialty.

What this exam covers

  • Threat Detection and Incident Response9 questions / 14% of the exam
  • Security Logging and Monitoring12 questions / 18% of the exam
  • Infrastructure Security13 questions / 20% of the exam
  • Identity and Access Management10 questions / 16% of the exam
  • Data Protection12 questions / 18% of the exam
  • Management and Security Governance9 questions / 14% of the exam

Checking what you already have access to.

Every question is original, written from the published objectives. We never reproduce, paraphrase, or imitate real exam content, and neither should anything else you study from.