nerdexam
Amazon

SCS-C02 · Question #17

A company has thousands of AWS Lambda functions. While reviewing the Lambda functions, a security engineer discovers that sensitive information is being stored in environment variables and is viewable

Sign in or unlock SCS-C02 to reveal the answer and full explanation for question #17. The question stem and answer options stay visible for context.

Submitted by asante_acc· Mar 6, 2026Data Protection

Question

A company has thousands of AWS Lambda functions. While reviewing the Lambda functions, a security engineer discovers that sensitive information is being stored in environment variables and is viewable as plaintext in the Lambda console. The values of the sensitive information are only a few characters long. What is the MOST cost-effective way to address this security issue?

Options

  • ASet up IAM policies from the Lambda console to hide access to the environment variables.
  • BUse AWS Step Functions to store the environment variables. Access the environment variables at
  • CStore the environment variables in AWS Secrets Manager, and access them at runtime. Use IAM
  • DStore the environment variables in AWS Systems Manager Parameter Store as secure string

Unlock SCS-C02 to see the answer

You've previewed enough free SCS-C02 questions. Unlock SCS-C02 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.

Topics

#Lambda#environment variables#Parameter Store#secrets management
Full SCS-C02 Practice