nerdexam
AmazonAmazon

SCS-C03 · Question #12

SCS-C03 Question #12: Real Exam Question with Answer & Explanation

Sign in or unlock SCS-C03 to reveal the answer and full explanation for question #12. The question stem and answer options stay visible for context.

Submitted by packet_pusher· Mar 6, 2026Data Protection

Question

A company is planning to migrate its applications to AWS in a single AWS Region. The company's applications will use a combination of Amazon EC2 instances, Elastic Load Balancing (ELB) load balancers, and Amazon S3 buckets. The company wants to complete the migration as quickly as possible. All the applications must meet the following requirements: - Data must be encrypted at rest. - Data must be encrypted in transit. - Endpoints must be monitored for anomalous network traffic. Which combination of steps should a security engineer take to meet these requirements with the LEAST effort? (Select THREE.)

Options

  • AInstall the Amazon Inspector agent on EC2 instances by using AWS Systems Manager
  • BEnable Amazon GuardDuty in all AWS accounts.
  • CCreate VPC endpoints for Amazon EC2 and Amazon S3. Update VPC route tables to use only
  • DConfigure AWS Certificate Manager (ACM). Configure the load balancers to use certificates from
  • EUse AWS Key Management Service (AWS KMS) for key management. Create an S3 bucket
  • FUse AWS Key Management Service (AWS KMS) for key management. Create an S3 bucket

Unlock SCS-C03 to see the answer

You've previewed enough free SCS-C03 questions. Unlock SCS-C03 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.

Topics

#Data Encryption#Threat Detection#AWS KMS#AWS ACM
Full SCS-C03 PracticeBrowse All SCS-C03 Questions