SCS-C02 Threat Detection and Incident Response Practice Question

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

• ✓

  First, create IAM roles with least privilege for CodePipeline and CodeBuild. Then, create an encrypted S3 bucket for storing artifacts. Next, create a source repository (e.g., AWS CodeCommit). After that, create a build project configured with security scanning tools. Finally, create the CodePipeline that integrates the source, build, and deployment stages.

  Why this is correct

  This is the correct order because IAM roles must be established first to define permissions for services. The encrypted bucket is needed to securely store artifacts. The source repository and build project are independent components that must exist before the pipeline can reference them. The pipeline is created last to tie all components together.

• ✗

  First, create an encrypted S3 bucket. Then, create a source repository. Next, create IAM roles. After that, create a build project with security scanning. Finally, create the pipeline.

  Why it's wrong here

  This is incorrect because IAM roles should be created before resources like the bucket or source repository, as roles define who can create and access those resources. Placing IAM roles after bucket and source might lead to permission errors and misconfiguration.

• ✗

  First, create the pipeline. Then, create a source repository. Next, create a build project with security scanning. After that, create IAM roles. Finally, create an encrypted S3 bucket.

  Why it's wrong here

  This is incorrect because the pipeline cannot be created without first having the source repository, build project, and artifact bucket defined. Additionally, IAM roles are prerequisites for almost all AWS service actions, so they should be created early, not after the pipeline.

• ✗

  First, create a source repository. Then, create a build project with security scanning. Next, create IAM roles. After that, create the pipeline. Finally, create an encrypted S3 bucket.

  Why it's wrong here

  This is incorrect because the artifact bucket must exist before the pipeline is created, as the pipeline needs a location to store artifacts. Also, IAM roles should be established before creating resources like the source repository and build project to ensure proper permissions.

Go deeper

Related to this question