For IndividualsFor Educators
ExpertMinds LogoExpertMinds
ExpertMinds

Ace your certifications with Practice Exams and AI assistance.

  • Browse Exams
  • For Educators
  • Blog
  • Privacy Policy
  • Terms of Service
  • Cookie Policy
  • Support
  • AWS SAA Exam Prep
  • PMI PMP Exam Prep
  • CPA Exam Prep
  • GCP PCA Exam Prep

© 2026 TinyHive Labs. Company number 16262776.

    PracticeAWS Solutions Architect Professional (SAP-C02)AWS Solutions Architect Professional SAP-C02 Practice Exam 2Question 22
    Medium1 markMultiple Choice
    Domain 2.3: Security ControlsSecurityComplianceHealthcare

    AWS SAP-C02 · Question 22 · Domain 2.3: Security Controls

    A healthcare company is designing a new application that processes PHI (Protected Health Information). They must ensure end-to-end encryption, strict network isolation, and automated auditing of all API calls. Which THREE AWS services are required to meet these compliance mandates? (Select THREE)

    Answer options:

    A.

    Amazon Inspector

    B.

    AWS Key Management Service (KMS)

    C.

    AWS Direct Connect

    D.

    AWS CloudTrail

    E.

    Amazon Macie

    F.

    AWS PrivateLink (VPC Endpoints)

    G.

    AWS Shield Advanced

    How to approach this question

    Match the requirements (encryption, auditing, isolation) to the services.

    Full Answer

    B,D,F
    KMS handles encryption. CloudTrail handles API auditing. PrivateLink provides network isolation by ensuring traffic between VPCs and AWS services does not traverse the public internet.

    Common mistakes

    Choosing Macie for auditing API calls.
    Question 21All questionsQuestion 23

    Practice the full AWS Solutions Architect Professional SAP-C02 Practice Exam 2

    75 questions · hints · full answers · grading

    Sign up freeTake the exam

    More questions from this exam

    Q01A company is setting up a multi-account AWS environment using AWS Organizations. They need to ens...EasyQ02An enterprise needs to connect its on-premises data center to AWS. They require a dedicated, priv...EasyQ03A company wants to share a single AWS Transit Gateway across multiple AWS accounts within their A...EasyQ04An architect needs to design a highly available database architecture that spans multiple AWS Reg...EasyQ05A global financial institution is migrating its core banking application to AWS. The application ...Medium
    View all 75 questions →