● 今天也在整理新题
英文原题 · 预览不显示答案与解析。

SCS-C03 免费考试题

完整 PDF 包含全部答案和简明解析。

CERTPIG 免费样题AWS Certified Security - Specialty SCS-C03
1 / 3
Question 1

A security engineer is troubleshooting an AWS Lambda function that is named MyLambdaFunction. The function is encountering an error when the function attempts to read the objects in an Amazon S3 bucket that is named DOC-EXAMPLE-BUCKET. The S3 bucket has the following bucket policy: [image: 01.png] Which change should the security engineer make to the policy to ensure that the Lambda function can read the bucket objects?

Question 2

HOTSPOT - A company is building a web application that needs to authenticate external users across multiple microservices that the company hosts on Amazon Elastic Container Service (Amazon ECS). The solution must use temporary credentials and minimize the management overhead required to maintain user databases. Select and order the correct steps from the following list to implement a secure authentication strategy that meets these requirements. Select each step one time or not at all. Configure Amazon Cognito user pools for user authentication. Set up an IAM role for each microservice. Grant each role appropriate permissions. Implement an Amazon API Gateway HTTP API with AWS Lambda authorizers to validate tokens before forwarding requests to microservices. Create an Amazon DynamoDB table to store user credentials for each microservice. Create an Amazon Cognito application client to interact with the web application. Set up AWS IAM Identity Center to give users access to the microservices. [image: 01.png]

0 / 6 已作答
PREVIEW POLICY6 questions are shown without answers. The current PDF contains 88 questions with answer notes.