ExamGecko
Question list
Search
Search

List of questions

Search

Related questions











Question 152 - SCS-C01 discussion

Report
Export

A Security Administrator is configuring an Amazon S3 bucket and must meet the following security requirements:

Encryption in transit

Encryption at rest

Logging of all object retrievals in AWS CloudTrail

Which of the following meet these security requirements? (Choose three.)

A.
Specify “aws:SecureTransport”: “true” within a condition in the S3 bucket policy.
Answers
A.
Specify “aws:SecureTransport”: “true” within a condition in the S3 bucket policy.
B.
Enable a security group for the S3 bucket that allows port 443, but not port 80.
Answers
B.
Enable a security group for the S3 bucket that allows port 443, but not port 80.
C.
Set up default encryption for the S3 bucket.
Answers
C.
Set up default encryption for the S3 bucket.
D.
Enable Amazon CloudWatch Logs for the AWS account.
Answers
D.
Enable Amazon CloudWatch Logs for the AWS account.
E.
Enable API logging of data events for all S3 objects.
Answers
E.
Enable API logging of data events for all S3 objects.
F.
Enable S3 object versioning for the S3 bucket.
Answers
F.
Enable S3 object versioning for the S3 bucket.
Suggested answer: A, C, E
asked 16/09/2024
Tom Starren
43 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first