SCS-C02 Domain 2: Incident Response

After a design review, leadership requires the team to route incidents to ticketing. Which approach is MOST reliable? route incidents to ticketing.

Multiple choice — select one answer

Answer choices

  1. a. Lost context (not recommended for production workloads)
  2. b. SSM Automation and Security Hub custom actions
  3. c. Isolate instance and snapshot volumes
  4. d. EventBridge to Jira/ServiceNow via Lambda

Architectural breakdown & explanation

Integrations maintain incident records.

Correct answer(s): d. EventBridge to Jira/ServiceNow via Lambda

Exam domain: Domain 2: Incident Response (14% weight on the official guide).

Official documentation & study links

Practice this certification

This page is one question from the AWS Certified Security – Specialty bank. Run a full timed practice exam with domain-weighted random questions in your browser.