Cert Master

SCS-C02 Domain 6: Security Foundations and Governance

For cost and security, the team must map controls to CIS AWS Foundations. What is the recommended approach? map controls to CIS AWS Foundations.

Multiple choice — select one answer

Answer choices

  1. a. AWS Audit Manager
  2. b. S3 Object Lock for log bucket
  3. c. Security Hub CIS benchmark
  4. d. AWS Config conformance packs

Architectural breakdown & explanation

Security Hub runs automated compliance checks.

Correct answer(s): c. Security Hub CIS benchmark

Exam domain: Domain 6: Security Foundations and Governance (11% weight on the official guide).

Official documentation & study links

Practice this certification

This page is one question from the AWS Certified Security – Specialty bank. Run a full timed practice exam with domain-weighted random questions in your browser.

Start practice exam View exam overview All certifications