Amazon AWS Certified Security-Specialty Exam Questions
AWS Certified Security - Specialty (SCS-C01)

AWS Certified Security-Specialty Exam Discussions & Posts

Anonymous User Commented on April 10, 2026
Question 1:

• Correct answer: C — test (e.g., test security-policy-match).

• Explanation: The test CLI command simulates traffic through the firewall and reveals exactly which elements would be triggered—Security policy rule, NAT translation, static route, or PBF rule—for a given source/destination/service. It’s a troubleshooting tool to validate how traffic would be handled by the policies without sending real traffic.

India

Anonymous User Commented on April 10, 2026
Question 6:
Question 6 asks which agreement type defines the time frame in which a vendor needs to respond. The correct answer is:

• Answer: B — SLA (Service Level Agreement)

Key concepts:

• An SLA specifies the service levels, including expected response and resolution times for incidents, uptime, and support hours in a vendor relationship.
• It creates enforceable metrics (e.g., response within X hours, problem solved within Y hours) and may include service credits if not met.

Why the others don’t fit:

• A) SOW (Statement of Work): defines project scope, deliverables, and timelines for a specific project, not ongoing response windows.
• C) MOA (Memorandum of Agreement): outlines mutual aims; not typically enforceable performance metrics.<
  India

Anonymous User Commented on April 10, 2026
Question 4:

• The task is an image classification problem (predicting plant diseases). The metric to evaluate “how many images were classified correctly” is Accuracy.

• Why this is correct:

- Accuracy = (number of correctly predicted images) / (total number of images). It directly measures overall correctness for classification tasks (binary or multi-class).

• Why the other options are not appropriate here:

- R-squared score and RMSE are metrics for regression, not classification. - Learning rate is a training hyperparameter, not a measure of model performance.

• Quick tip: In cases with class imbalance, you might also look at precision, recall, or F1-score, but for this question, accuracy is the i
  United States

Anonymous User Commented on April 10, 2026

• Answer: C — linkage to business area objectives.

Why this is the most important:

• Senior management cares about how security supports business goals. Linking the governance process to business objectives shows how security enables value, not just protects assets.
• It aligns risk management with business priorities (revenue, availability, regulatory requirements), helping secure funding and sponsorship.

Why the other options are less critical as the sole focus:

• Knowledge required to analyze each issue: important for depth, but not what senior management needs to judge governance effectiveness.
• Information security metrics: useful, but only meaningful when tied to business objectives; metrics without context may misrepresent value.
• Baseline against which metrics are evalua
  United States

Anonymous User Commented on April 10, 2026

• Correct answer: Role-based access control (RBAC).

• Why: RBAC assigns permissions to roles rather than to individual users. Users are granted access by being placed into roles that match their job responsibilities. This greatly simplifies management when many users share similar duties, reducing administrative overhead and the chance of granting excess rights. It also supports consistent application of the principle of least privilege and easier auditing.

• How it compares to other options:

- DAC: Access is granted by individual owners, which can lead to permission sprawl and harder administration for many users. - Content-dependent Access Control: Access decisions depend on the content being accessed, not on user roles. - Rule-based Access Control: Focuses on policie
United States