Amazon Web Services Updated SCS-C01 Exam Questions and Answers by rayna

(Amazon Kinesis Data Analytics is the easiest way to analyze streaming data, also provide encryption at rest and in-transit) -https://docs.IAM.amazon.com/kinesisanalytics/latest/dev/data-protection.html

https://medium.com/mudita-mi sra/how-to-audit-your-aws-resources-for-security-compliance-by-using-custom-IAM-config-rules-2e53b09006de

https://docs. IAM.amazon.com/ses/latest/DeveloperGuide/smtp-connect.html

The IAM Trusted Advisor can check security groups for rules that allow unrestricted access to a resource. Unrestricted access increases opportunities for malicious activity (hacking, denial-of-service attacks, loss of data).

If you go to IAM Trusted Advisor, you can see the details

C:\Users\wk\Desktop\mudassar\Untitled.jpg

Option A is invalid because IAM Inspector is used to detect security vulnerabilities in instances and not for security groups.

Option C is invalid because this can be used to detect changes in security groups but not show you security groups that have compromised access.

Option Dis partially valid but would just be a maintenance overhead

For more information on the IAM Trusted Advisor, please visit the below URL:

https://IAM.amazon.com/premiumsupport/trustedadvisor/best-practices;

The correct answer is: Use the IAM Trusted Advisor to see which security groups have compromised access. Submit your Feedback/Queries to our Experts