SCS-C02 Management and Security Governance Practice Question

Which THREE steps should a security engineer take to remediate a compromised IAM user whose access keys were exposed? (Choose three.)

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

✓

Deactivate the access keys.

Immediately deactivate or delete the access keys to stop usage. Rotate the keys if the user still needs access, but the old keys must be deactivated. Remove the compromised user from any groups to limit permissions. Changing the password does not affect access keys. Creating a new user with the same permissions is unnecessary if the user can be cleaned. Reviewing CloudTrail logs is important but is an investigation step, not immediate remediation.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

✓
Deactivate the access keys.
Why this is correct
Deactivating keys stops their use immediately.
✗
Create a new IAM user with the same permissions.
Why it's wrong here
Not necessary; the existing user can be cleaned.
✓
Remove the user from all IAM groups.
Why this is correct
Removing from groups reduces permissions.
✗
Change the IAM user's password.
Why it's wrong here
Password change does not affect access keys.
✓
Delete the access keys.
Why this is correct
Deleting keys permanently removes them.

About these practice questions

Courseiva creates original exam-style practice questions with explanations and wrong-answer analysis. It does not publish real exam questions, exam dumps, or protected exam content. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

Last reviewed: Jun 20, 2026

Question Discussion

Share a tip, memory trick, or ask about the reasoning behind this question. Do not post real exam questions, leaked content, braindumps, or copyrighted exam material. Comments are moderated and may be removed without notice.

Loading comments…

Keep practising

Question 1,266 of 1,570

Next question

Practice tests

Quick scored rounds with instant marking and a written explanation per question.

SCS-C02 Practice Test 4 — 25 Questions→SCS-C02 Practice Test 3 — 25 Questions→

Study by exam domain

Each domain maps to a weighted exam section. Focus on the domain where you are weakest.

Management and Security Governance Identity and Access Management Threat Detection and Incident Response

Filter by question format

Pick a question style and work only that format until it feels routine.

Browse scenarios

Go deeper on a topic

Each topic page collects the questions that test one concept, plus the theory behind it.

Management and Security Governance practice questions Data Protection practice questions Threat Detection and Incident Response practice questions SCS-C02 fundamentals practice questions

Continue studying

All SCS-C02 questions Study guide SCS-C02 practice test

This SCS-C02 practice question is part of Courseiva's free Amazon Web Services certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SCS-C02 exam.