nerdexam
Amazon

SCS-C02 · Question #455

A company is developing a new serverless application that uses AWS Lambda functions. The company uses AWS CloudFormation to deploy the Lambda functions. The company's developers are trying to debug a

Sign in or unlock SCS-C02 to reveal the answer and full explanation for question #455. The question stem and answer options stay visible for context.

Submitted by packet_pusher· Mar 6, 2026Security Logging and Monitoring

Question

A company is developing a new serverless application that uses AWS Lambda functions. The company uses AWS CloudFormation to deploy the Lambda functions. The company's developers are trying to debug a Lambda function that is deployed. The developers cannot debug the Lambda function because the Lambda function is not logging its output to Amazon CloudWatch Logs. Which combination of steps should a security engineer take to resolve this issue? (Choose two.)

Options

  • ACheck the role that is defined in the CloudFormation template and is passed to the Lambda
  • BCheck the execution role that is configured in the CloudFormation template for the Lambda
  • CCheck the Lambda function configuration in the CloudFormation template. Ensure that the
  • DCheck the resource policy that is configured in the CloudFormation template for the Lambda
  • ECheck the role that the developers use to debug the Lambda function. Ensure that the role has a

Unlock SCS-C02 to see the answer

You've previewed enough free SCS-C02 questions. Unlock SCS-C02 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.

Topics

#Lambda execution role#CloudWatch Logs#IAM permissions#CloudFormation
Full SCS-C02 Practice