Amazon Web Services udemy selected Scs-c01 Aws Certified Specialty Questions Answers by Rufus q53 vce pdf

Page: 12 / 43

Exam Name:	AWS Certified Security - Specialty
Exam Code:	SCS-C01 Dumps
Vendor:	Amazon Web Services	Certification:	AWS Certified Specialty
Questions:	589 Q&A's	Shared By:	rufus

Question 48

The Security team believes that a former employee may have gained unauthorized access to IAM resources sometime in the past 3 months by using an identified access key.

What approach would enable the Security team to find out what the former employee may have done within IAM?

Options:

Use the IAM CloudTrail console to search for user activity.

Use the Amazon CloudWatch Logs console to filter CloudTrail data by user.

Use IAM Config to see what actions were taken by the user.

Use Amazon Athena to query CloudTrail logs stored in Amazon S3.

Discussion

Question 49

A Systems Engineer is troubleshooting the connectivity of a test environment that includes a virtual security appliance deployed inline. In addition to using the virtual security appliance, the Development team wants to use security groups and network ACLs to accomplish various security requirements in the environment.

What configuration is necessary to allow the virtual security appliance to route the traffic?

Options:

Disable network ACLs.

Configure the security appliance's elastic network interface for promiscuous mode.

Disable the Network Source/Destination check on the security appliance's elastic network interface

Place the security appliance in the public subnet with the internet gateway

Discussion

Mariam

Do anyone think Cramkey questions can help improve exam scores?

Katie Jan 19, 2026

Absolutely! Many people have reported improved scores after using Cramkey Dumps, and there are also success stories of people passing exams on the first try. I already passed this exam. I confirmed above questions were in exam.

Aryan

Absolutely rocked! They are an excellent investment for anyone who wants to pass the exam on the first try. They save you time and effort by providing a comprehensive overview of the exam content, and they give you a competitive edge by giving you access to the latest information. So, I definitely recommend them to new students.

Jessie Jan 17, 2026

did you use PDF or Engine? Which one is most useful?

Anaya

I found so many of the same questions on the real exam that I had already seen in the Cramkey Dumps. Thank you so much for making exam so easy for me. I passed it successfully!!!

Nina Jan 12, 2026

It's true! I felt so much more confident going into the exam because I had already seen and understood the questions.

Lennox

Something Special that they provide a comprehensive overview of the exam content. They cover all the important topics and concepts, so you can be confident that you are well-prepared for the test.

Aiza Jan 25, 2026

That makes sense. What makes Cramkey Dumps different from other study materials?

Aliza

I used these dumps for my recent certification exam and I can say with certainty that they're absolutely valid dumps. The questions were very similar to what came up in the actual exam.

Jakub Jan 8, 2026

That's great to hear. I am going to try them soon.

Question 50

An IAM account includes two S3 buckets: bucket1 and bucket2. The bucket2 does not have a policy defined, but bucket1 has the following bucket policy:

Questions 50

In addition, the same account has an IAM User named “alice”, with the following IAM policy.

Questions 50

Which buckets can user “alice” access?

Options:

Bucket1 only

Bucket2 only

Both bucket1 and bucket2

Neither bucket1 nor bucket2

Discussion

Question 51

A company has deployed a custom DNS server in IAM. The Security Engineer wants to ensure that Amazon EC2 instances cannot use the Amazon-provided DNS.

How can the Security Engineer block access to the Amazon-provided DNS in the VPC?

Options:

Deny access to the Amazon DNS IP within all security groups.

Add a rule to all network access control lists that deny access to the Amazon DNS IP.

Add a route to all route tables that black holes traffic to the Amazon DNS IP.

Disable DNS resolution within the VPC configuration.