Free SCS-C03 Web TestEngine Demo

Exit VCEDump SCS-C03 AWS Certified Security - Specialty

Q20 Single choice

A company needs to build a code-signing solution using an AWS KMS asymmetric key and must store immutable evidence of key creation and usage for compliance and audit purposes.

Which solution meets these requirements?

A
Create an Amazon S3 bucket with S3 Object Lock enabled. Create an AWS CloudTrail trail with log file validation enabled for KMS events. Store logs in the bucket and grant auditors access.
B
Log application events to Amazon CloudWatch Logs and export them.
C
Capture KMS API calls using EventBridge and store them in DynamoDB.
D
Track KMS usage with CloudWatch metrics and dashboards.

Previous Check answer

Question map20 / 39

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39

Current Correct Answered Incorrectly Reviewed 0 Remaining 39

Marked Questions0

No marked questions.

Answered Incorrectly0

No incorrect answers.

SCS-C03 Web TestEngine demo