SCS-C02 Domain 6: Security Foundations and Governance

A company needs to document shared responsibility for SaaS. Which option meets the requirement with the LEAST implementation effort? document shared responsibility for SaaS.

Multiple choice — select one answer

Answer choices

  1. a. AWS configures SGs customer ignores (not recommended for production workloads)
  2. b. S3 Object Lock for log bucket
  3. c. AWS Audit Manager
  4. d. Customer manages data in SaaS; AWS manages cloud

Architectural breakdown & explanation

Understand responsibility splits per service model.

Correct answer(s): d. Customer manages data in SaaS; AWS manages cloud

Exam domain: Domain 6: Security Foundations and Governance (11% weight on the official guide).

Official documentation & study links

Practice this certification

This page is one question from the AWS Certified Security – Specialty bank. Run a full timed practice exam with domain-weighted random questions in your browser.