SCS-C02 Exam Dumps : AWS Certified Security - Specialty

Note that the IP is known and the question wants us to deny access from that particular address and so we can use IP set match policy of WAF to block access.

The below diagram from an IAM blog shows how security groups can be monitored

C:\Users\wk\Desktop\mudassar\Untitled.jpg

Option A is invalid because you need to use Cloudwatch Events to check for chan,

Option B is invalid because you need to use Cloudwatch Events to check for chang

Option C is invalid because IAM inspector is not used to monitor the activity on Security Groups

For more information on monitoring security groups, please visit the below URL:

Ihttpsy/IAM.amazon.com/blogs/security/how-to-automatically-revert-and-receive-notifications-about-changes-to-your-amazonj 'pc-security-groups/

The correct answer is: Use Cloudwatch events to be triggered for any changes to the Security Groups. Configure the Lambda function for email notification as well.

Submit your Feedback/Queries to our Experts

The AWS Encryption SDK supports client-side encryption and cryptographic signing, enabling applications to protect and verify sensitive data before it is transmitted or stored. This allows end-to-end protection and helps detect unauthorized data changes using signatures.

While both AWS Encryption SDK and the DynamoDB Encryption Client provide similar functionalities, the AWS Encryption SDK is broader in scope and better supported for generalized end-to-end encryption patterns.

This solution ensures:

Data protection in transit and at rest

Integrity assurance through signing

Compliance with best practices under the Data Protection domain.