🔥 40% Off Crucial Exams Memberships — This Week Only

2 days, 8 hours remaining!
Crucial Exams

ISC2 Systems Security Certified Practitioner (SSCP) Practice Question

Your company has multiple AWS accounts. You must detect credential-compromise indicators-unusual API calls, EC2 port scans, and DNS-based data exfiltration-using a fully managed service that analyzes CloudTrail, VPC Flow Logs, and DNS queries without host agents. The solution must be enabled once in the management account and automatically aggregate findings for all current and future organization accounts with minimal ongoing effort. Which approach satisfies these requirements?

  • Stream CloudTrail logs from all accounts to a centralized S3 bucket, then schedule AWS Lambda functions to run Amazon Athena queries that look for outliers.

  • Activate Amazon Macie in every account and analyze S3 server access logs for unusual read and copy operations.

  • Enable Amazon GuardDuty in the organization's management account and automatically enroll all member accounts to aggregate machine-learning security findings.

  • Configure AWS Config conformance packs in each account and use Amazon CloudWatch Events to alert on any non-compliant resources.

ISC2 Systems Security Certified Practitioner (SSCP)
Systems and Application Security
Your Score:
Settings & Objectives
Random Mixed
Questions are selected randomly from all chosen topics, with a preference for those you haven’t seen before. You may see several questions from the same objective or domain in a row.
Rotate by Objective
Questions cycle through each objective or domain in turn, helping you avoid long streaks of questions from the same area. You may see some repeat questions, but the distribution will be more balanced across topics.

Check or uncheck an objective to set which questions you will receive.

Wipe Score
Bash, the Crucial Exams Chat Bot
AI Bot