For IndividualsFor Educators
ExpertMinds LogoExpertMinds
ExpertMinds

Ace your certifications with Practice Exams and AI assistance.

  • Browse Exams
  • For Educators
  • Blog
  • Privacy Policy
  • Terms of Service
  • Cookie Policy
  • Support
  • AWS SAA Exam Prep
  • PMI PMP Exam Prep
  • CPA Exam Prep
  • GCP PCA Exam Prep

© 2026 TinyHive Labs. Company number 16262776.

    PracticeAWS Solutions Architect Professional (SAP-C02)AWS Solutions Architect Professional SAP-C02 Practice Exam 6Question 34
    Easy1 markMultiple Choice
    Domain 2.3: Security ControlsSecurityMacieData Protection

    AWS SAP-C02 · Question 34 · Domain 2.3: Security Controls

    A financial institution requires that all data stored in Amazon S3 is automatically scanned for sensitive information such as credit card numbers and Social Security Numbers. If found, an alert must be generated. Which service should be used?

    Answer options:

    A.

    Amazon GuardDuty

    B.

    Amazon Macie

    C.

    AWS Security Hub

    D.

    Amazon Inspector

    How to approach this question

    Identify the service designed for data classification and DLP in S3.

    Full Answer

    B.Amazon Macie✓ Correct
    Amazon Macie
    Amazon Macie automatically discovers, classifies, and protects sensitive data (like PII and financial data) stored in Amazon S3.

    Common mistakes

    Confusing Macie with GuardDuty.
    Question 33All questionsQuestion 35

    Practice the full AWS Solutions Architect Professional SAP-C02 Practice Exam 6

    75 questions · hints · full answers · grading

    Sign up freeTake the exam

    More questions from this exam

    Q01A global enterprise requires highly available hybrid connectivity between its on-premises data ce...HardQ02An organization has 50 VPCs across two AWS Regions connected via Transit Gateways (TGW). The TGWs...HardQ03A company uses AWS Organizations. The network team wants to share a central Transit Gateway (TGW)...MediumQ04An enterprise has on-premises data centers in the US and Europe. They want to use the AWS global ...HardQ05A company requires that all API calls to Amazon S3 from their VPC must not traverse the public in...Medium
    View all 75 questions →