SCS-C02 Domain 4: Infrastructure Security

A company needs to block public S3 access account-wide. Which option meets the requirement with the LEAST implementation effort? block public S3 access account-wide.

Multiple choice — select one answer

Answer choices

  1. a. S3 Block Public Access at account level
  2. b. AWS Network Firewall
  3. c. AWS WAF managed rule groups
  4. d. AWS Shield and Route 53 routing policies

Architectural breakdown & explanation

Account-level BPA prevents accidental exposure.

Correct answer(s): a. S3 Block Public Access at account level

Exam domain: Domain 4: Infrastructure Security (17% weight on the official guide).

Official documentation & study links

Practice this certification

This page is one question from the AWS Certified Security – Specialty bank. Run a full timed practice exam with domain-weighted random questions in your browser.