SCS-C03 · Question #47
A company's security engineer receives an alert that indicates that an unexpected principal is accessing a company-owned Amazon Simple Queue Service (Amazon SQS) queue. All the company's accounts are
Sign in or unlock SCS-C03 to reveal the answer and full explanation for question #47. The question stem and answer options stay visible for context.
Question
A company's security engineer receives an alert that indicates that an unexpected principal is accessing a company-owned Amazon Simple Queue Service (Amazon SQS) queue. All the company's accounts are within an organization in AWS Organizations. The security engineer must implement a mitigation solution that minimizes compliance violations and investment in tools outside of AWS. What should the security engineer do to meet these requirements?
Options
- ACreate security groups and attach them to all SQS queues.
- BModify network ACLs in all VPCs to restrict inbound traffic.
- CCreate interface VPC endpoints for Amazon SQS. Restrict access using aws:SourceVpce and
- DUse a third-party cloud access security broker (CASB).
Unlock SCS-C03 to see the answer
You've previewed enough free SCS-C03 questions. Unlock SCS-C03 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.