AWS Certified Specialty Changed SCS-C02 Questions

By disabling SSL termination, you are leaving an unsecure connection from the ELB to the back end instances. Hence this means that part of the data transit is not being encrypted.

Option B is incorrect because this would not guarantee complete encryption of data in transit

Option C and D are incorrect because these would not guarantee encryption

For more information on SSL Listeners for your load balancer, please visit the below URL:

The correct answer is: Use S3 SSE and use SSL for data in transit

Submit your Feedback/Queries to our Experts

The SecurityHeadersPolicy is a managed policy provided by Amazon CloudFront that includes a set of recommended security headers to enhance the security of your website. These headers help protect against various types of attacks, including man-in-the-middle attacks. By applying the SecurityHeadersPolicy to your CloudFront distribution, the necessary security headers will be automatically added to the responses sent by CloudFront. This reduces operational overhead because you don't have to manually configure or manage the headers yourself.

Verify File Permissions:

Ensure that the log files being monitored by the CloudWatch Logs agent are still accessible.

Check permissions to confirm that the agent's process can read the files.

Check Log Rotation Rules:

Operating systems may rotate logs periodically, causing the monitored file path to change.

Update the CloudWatch Logs agent configuration to handle rotated log files (e.g., wildcards or new file paths).

Diagnose with Agent Logs:

Review the agent logs in/var/log/amazon/or equivalent to identify potential issues.

Amazon CloudWatch Logs Agent Setup

Handling Log Rotation