nerdexam
AmazonAmazon

SCS-C02 · Question #71

SCS-C02 Question #71: Real Exam Question with Answer & Explanation

Sign in or unlock SCS-C02 to reveal the answer and full explanation for question #71. The question stem and answer options stay visible for context.

Submitted by alyssa_d· Mar 6, 2026

Question

A company has a requirement that none of its Amazon RDS resources can be publicly accessible. A security engineer needs to set up monitoring for this requirement and must receive a near-real-time notification if any RDS resource is noncompliant. Which combination of steps should the security engineer take to meet these requirements? (Choose three.)

Options

  • AConfigure RDS event notifications on each RDS resource. Target an AWS Lambda function that
  • BConfigure the rds-instance-public-access-check AWS Config managed rule to monitor the RDS
  • CConfigure the Amazon EventBridge (Amazon CloudWatch Events) rule to target an Amazon
  • DConfigure RDS event notifications to post events to an Amazon Simple Queue Service (Amazon
  • EConfigure an Amazon EventBridge (Amazon CloudWatch Events) rule that is invoked by a
  • FConfigure an Amazon EventBridge (Amazon CloudWatch Events) rule that is invoked when the

Unlock SCS-C02 to see the answer

You've previewed enough free SCS-C02 questions. Unlock SCS-C02 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.

Full SCS-C02 PracticeBrowse All SCS-C02 Questions