Free Amazon SCS-C03 Exam Questions

Become Amazon Certified with updated SCS-C03 exam questions and correct answers

Page: 1 / 48

Total 236 Questions | Updated On: Sep 02, 2026

Add To Cart

Question 1

A company needs to securely deploy resources and workloads across AWS accounts. Theaccounts are in an organization in AWS Organizations.The company needs to use AWS CloudFormation for infrastructure as code (IaC)management of approved architectural patterns. The company also must enforce taggingrequirements and specific guidelines for resource and workload configuration and creation.Which solution will meet these requirements?

A : Use CloudFormation stack policies to prevent the creation of resources that do not meet the tagging or configuration requirements. Use Amazon EventBridge rules to detect API calls that attempt to create resources outside of CloudFormation.

B : Use an AWS CodePipeline pipeline to test and deploy IaC-defined workloads through CloudFormation into the accounts. Use AWS Config rules to enforce the tagging requirements. Apply an SCP to prevent the creation of misconfigured resources in all OUs.

C : Create an IAM permissions boundary to prevent the creation of misconfigured resources through CloudFormation and to enforce the tagging requirements. Apply the permissions boundary to all account roles. Use AWS Config rules to identify existing resources that are in a misconfigured state.

D : Use AWS Service Catalog with CloudFormation to manage access to approved architecture configurations. Provision Service Catalog portfolios to the accounts across the organization. Use AWS Config rules to enforce the tagging requirements and other resource configuration policies across accounts.

Answer: D

Question 2

Which team member is actively involved and interested in all phases of the project?

A : Contractors

B : Owners

C : Architects/engineers

D : Manufacturers/suppliers

Answer: B

Question 3

What can value analysis be used for?

A : To provide the owner with the lowest construction cost.

B : To enhance project value or reduce initial or long-term cost.

C : A phase for future work to allow higher quality items up front.

D : To change the perceived value by owner and stakeholder.

Answer: B

Question 4

A company is using AWS to run a long-running analysis process on data that is stored in Amazon S3 buckets. The process runs on a fleet of Amazon EC2 instances in an Auto Scaling group. The EC2 instances are deployed in a private subnet that does not have internet access. The EC2 instances access Amazon S3 through an S3 gateway endpoint that has the default access policy. Each EC2 instance uses an instance profile role that allows s3:GetObject and s3:PutObject only for required S3 buckets. The company learns that one or more EC2 instances are compromised and are exfiltrating data to an S3 bucket that isoutside the company’s AWS Organization. The processing job must continue to function. Which solution will meet these requirements?

A : Update the policy on the S3 gateway endpoint to allow S3 actions only if aws:ResourceOrgId and aws: PrincipalOrgId match the company’s organization.

B : Update the instance profile role policy to require aws:ResourceOrgId.

C : Add a network ACL rule to block outbound traffic on port 443.

D : Apply an SCP that restricts S3 actions using organization condition keys.

Answer: A

Question 5

A company runs workloads in an AWS account. A security engineer observes some unusual findings in Amazon GuardDuty. The security engineer wants to investigate a specific IAM role and generate an investigation report. The report must contain details about anomalous behavior and any indicators of compromise. Which solution will meet these requirements?

A : Use Amazon Detective to perform an investigation on the IAM role.

B : Use AWS Audit Manager to create an assessment. Specify the IAM role. Run an assessment report.

C : Use Amazon Inspector to create an assessment. Specify the IAM role. Run an assessment report.

D : Use Amazon Inspector to run an on-demand scan of the IAM role.

Answer: A

Page: 1 / 48

Total 236 Questions | Updated On: Sep 02, 2026

Add To Cart