nerdexam
Amazon

SCS-C02 · Question #302

Your IT Security team has advised to carry out a penetration test on the resources in their company's AWS Account. This is as part of their capability to analyze the security of the Infrastructure…

The correct answer is C. Submit a request to AWS Support. This concept is given in the AWS Documentation How do I submit a penetration testing request for my AWS resources? Issue I want to run a penetration test or other simulated event on my AWS architecture. How do I get permission from AWS to do that? Before performing security…

Submitted by andres_qro· Mar 6, 2026Security Foundations and Governance

Question

Your IT Security team has advised to carry out a penetration test on the resources in their company's AWS Account. This is as part of their capability to analyze the security of the Infrastructure. What should be done first in this regard?

Options

  • ATurn on Cloud trail and carry out the penetration test
  • BTurn on VPC Flow Logs and carry out the penetration test
  • CSubmit a request to AWS Support
  • DUse a custom AWS Marketplace solution for conducting the penetration test

How the community answered

(40 responses)
  • A
    13% (5)
  • B
    8% (3)
  • C
    78% (31)
  • D
    3% (1)

Explanation

This concept is given in the AWS Documentation How do I submit a penetration testing request for my AWS resources? Issue I want to run a penetration test or other simulated event on my AWS architecture. How do I get permission from AWS to do that? Before performing security testing on AWS resources, you must obtain approval from AWS. After you submit your request AWS will reply in about two business days. AWS might have additional questions about your test which can extend the approval process, so plan accordingly and be sure that your initial request is as detailed as possible. If your request is approved, you'll receive an authorization number. Option A.B and D are all invalid because the first step is to get prior authorization from AWS for penetration tests * https://aws.amazon.com/security/penetration-testing/ * https://aws.amazon.com/premiumsupport/knowledge-center/penetration-testing/

Topics

#penetration testing#AWS policy#security assessment#compliance

Community Discussion

No community discussion yet for this question.

Full SCS-C02 Practice