Start learning →

AWS Security Scsdatagov — practice questions

Explore 2 free Scsdatagov questions in AWS Security Cloudcomputing. Open each question or exercise to read its content, reference answers and available explanation.

Practise Scsdatagov with Quill →

Scsdatagov questions and exercises with answers

Showing questions 1–2 of 2.

Worked practice questions

Which AWS service provides dedicated FIPS 140-2 Level 3 HSMs for tenants with strict regulatory requirements (e.g. PCI-DSS encryption-key custody)?

  1. Amazon RDS
  2. Amazon Macie
  3. AWS CloudHSM
  4. Amazon Route 53
Show answer and solution

Correct answer: C. AWS CloudHSM

CloudHSM is the dedicated FIPS-3 HSM (per SCS-C02 §5.2). The others aren't HSMs.

Open this question →

Which AWS service automatically discovers and classifies sensitive data (PII, financial data, credentials) in Amazon S3 using ML?

  1. Amazon Macie
  2. AWS Shield
  3. Amazon Inspector
  4. Amazon GuardDuty
Show answer and solution

Correct answer: A. Amazon Macie

Macie is the S3 sensitive-data classifier (per SCS-C02 §6.3). GuardDuty is threat-detection Inspector is vuln scan Shield is DDoS.

Open this question →

How to practise

  1. Choose a Scsdatagov question and try to work out your answer.
  2. Open the question to check the correct answer and read its worked solution.
  3. Continue in the app for bite-sized lessons, explanations and review with Quill. You can start without creating an account.

More Cloudcomputing topics