nerdexam
AmazonAmazon

SCS-C03 · Question #116

SCS-C03 Question #116: Real Exam Question with Answer & Explanation

Sign in or unlock SCS-C03 to reveal the answer and full explanation for question #116. The question stem and answer options stay visible for context.

Submitted by naveen.iyer· Mar 6, 2026

Question

A company's security engineer receives an alert that indicates that an unexpected principal is accessing a company-owned Amazon Simple Queue Service (Amazon SQS) queue. All the company's accounts are within an organization in AWS Organizations. The security engineer must implement a mitigation solution that minimizes compliance violations and investment in tools that are outside of AWS. What should the security engineer do to meet these requirements?

Options

  • ACreate security groups that only accept inbound traffic from the CIDR blocks of all the VPCs in
  • BIn all the VPCs in the organization, adjust the network ACLs to only accept inbound traffic from
  • CCreate interface VPC endpoints for Amazon SQS in all the VPCs in the organization. Set the
  • DUse a cloud access security broker (CASB) to maintain a list of managed resources. Configure

Unlock SCS-C03 to see the answer

You've previewed enough free SCS-C03 questions. Unlock SCS-C03 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.

Full SCS-C03 PracticeBrowse All SCS-C03 Questions