🔥 40% Off Crucial Exams Memberships — This Week Only

2 days, 8 hours remaining!
Crucial Exams

ISC2 Systems Security Certified Practitioner (SSCP) Practice Question

A security engineer is conducting an architecture risk review for a new serverless analytics pipeline that ingests files into an S3 bucket, triggers a Lambda function for processing, and stores the output in DynamoDB. The review must focus on design flaws that could enable an attacker who gains access to one component to move laterally or escalate privileges within the workload. Which activity during the review will best surface this specific risk before production deployment?

  • Review the Lambda function's IAM execution role and its trust policy to verify that only required permissions and principals are allowed.

  • Subscribe the application to AWS Shield Advanced to obtain DDoS detection and response support from AWS.

  • Configure DynamoDB auto scaling policies to ensure that the table adapts to variable workloads without throttling.

  • Enable S3 server access logging to monitor and later analyze read and write operations on the ingestion bucket.

ISC2 Systems Security Certified Practitioner (SSCP)
Risk Identification, Monitoring and Analysis
Your Score:
Settings & Objectives
Random Mixed
Questions are selected randomly from all chosen topics, with a preference for those you haven’t seen before. You may see several questions from the same objective or domain in a row.
Rotate by Objective
Questions cycle through each objective or domain in turn, helping you avoid long streaks of questions from the same area. You may see some repeat questions, but the distribution will be more balanced across topics.

Check or uncheck an objective to set which questions you will receive.

Wipe Score
Bash, the Crucial Exams Chat Bot
AI Bot