Amazon Exam SCS-C01 Topic 3 Question 37 Discussion

Actual exam question for Amazon's SCS-C01 exam

Question #: 37
Topic #: 3

A company's security information events management (SIEM) tool receives new AWS CloudTrail logs from an Amazon S3 bucket that is configured to send all object created event notification to an Amazon SNS topic An Amazon SQS queue is subscribed to this SNS topic. The company's SEM tool then ports this SQS queue for new messages using an IAM role and fetches new log events from the S3 bucket based on the SQS messages.

After a recent security review that resulted m restricted permissions, the SEM tool has stopped receiving new CloudTral logs

Which of the following are possible causes of this issue? (Select THREE)

AThe SOS queue does not allow the SQS SendMessage action from the SNS topic

BThe SNS topic does not allow the SNS Publish action from Amazon S3

CThe SNS topic is not delivering raw messages to the SQS queue

DThe S3 bucket policy does not allow CloudTrail to perform the PutObject action

EThe IAM role used by the 5EM tool does not have permission to subscribe to the SNS topic

FThe IAM role used by the SEM tool does not allow the SQS DeleteMessage action.

Show Suggested Answer

Suggested Answer: A, D, F

by Reita at Jan 06, 2023, 09:31 PM

Limited Time Offer

25%

Off

Get Premium SCS-C01 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Currently there are no comments in this discussion, be the first to comment!