[{"data":1,"prerenderedAt":662},["ShallowReactive",2],{"practiceExams":3,"practice-exam-\u002Fpractice-exams\u002Faws-certified-security-specialty":153,"practice-exam-concepts-\u002Fpractice-exams\u002Faws-certified-security-specialty":545,"courses-\u002Fpractice-exams\u002Faws-certified-security-specialty":570,"practice-exams-\u002Fpractice-exams\u002Faws-certified-security-specialty":619},[4,17,28,39,49,59,70,80,90,101,111,122,134,145],{"id":5,"slug":6,"description":7,"questionCount":8,"isActive":9,"datePublicModified":10,"difficulty":11,"examVersion":16},1,"aws-certified-solutions-architect-associate-saa-c03","Unlock your potential with the AWS Certified Solutions Architect - Associate Practice Exam Simulator. This comprehensive tool is designed to prepare you thoroughly and assess your readiness for the most sought-after AWS associate certification.",1203,true,"2026-10-30T00:00:00.000Z",{"title":12,"subtitle":13,"slug":14,"coverImageUrl":15},"AWS Certified Solutions Architect - Associate","SAA-C03","aws-certified-solutions-architect-associate","\u002Fimages\u002Fdifficulties\u002Faws-certified-solutions-architect-associatesaa-c03\u002Fcovers\u002Faws-SAA-C03.png",{"slug":6,"pageSlug":14},{"id":18,"slug":19,"description":20,"questionCount":21,"isActive":9,"datePublicModified":10,"difficulty":22,"examVersion":27},5,"aws-certified-cloud-practitioner-clf-c02","Master your AWS Certified Cloud Practitioner exam with our Practice Exam Simulator. Prepare effectively and assess your readiness with realistic practice exams designed to mirror the most popular official AWS exam.",937,{"title":23,"subtitle":24,"slug":25,"coverImageUrl":26},"AWS Certified Cloud Practitioner","CLF-C02","aws-certified-cloud-practitioner","\u002Fimages\u002Fdifficulties\u002Faws-certified-cloud-practitionerclf-c02\u002Fcovers\u002Faws-CLF-C02.png",{"slug":19,"pageSlug":25},{"id":29,"slug":30,"description":31,"questionCount":32,"isActive":9,"datePublicModified":10,"difficulty":33,"examVersion":38},8,"aws-certified-devops-engineer-professional-dop-c02","Boost your readiness for the AWS Certified DevOps Engineer - Professional (DOP-C02) exam with our practice exam simulator. Featuring realistic questions and detailed explanations, it helps you identify knowledge gaps and improve your skills.",1040,{"title":34,"subtitle":35,"slug":36,"coverImageUrl":37},"AWS Certified DevOps Engineer - Professional","DOP-C02","aws-certified-devops-engineer-professional","",{"slug":30,"pageSlug":36},{"id":40,"slug":41,"description":42,"questionCount":43,"isActive":9,"datePublicModified":10,"difficulty":44,"examVersion":48},9,"aws-certified-data-engineer-associate-dea-c01","Prepare for your AWS Certified Data Engineer - Associate exam with our practice exam simulator. Featuring real exam scenarios, detailed explanations, and instant feedback to boost your confidence and success rate.",891,{"title":45,"subtitle":46,"slug":47,"coverImageUrl":37},"AWS Certified Data Engineer - Associate","DEA-C01","aws-certified-data-engineer-associate",{"slug":41,"pageSlug":47},{"id":50,"slug":51,"description":52,"questionCount":53,"isActive":9,"datePublicModified":10,"difficulty":54,"examVersion":58},11,"aws-certified-ai-practitioner-aif-c01","Prepare for the AWS Certified AI Practitioner exam with our practice exam simulator. Realistic questions on AI, machine learning and generative AI fundamentals, with detailed explanations, help you find your knowledge gaps and assess your readiness.",928,{"title":55,"subtitle":56,"slug":57,"coverImageUrl":37},"AWS Certified AI Practitioner","AIF-C01","aws-certified-ai-practitioner",{"slug":51,"pageSlug":57},{"id":60,"slug":61,"description":62,"questionCount":63,"isActive":9,"datePublicModified":64,"difficulty":65,"examVersion":69},17,"aws-certified-generative-ai-developer-professional-aip-c01","Get ready for the AWS Certified Generative AI Developer - Professional exam with our practice exam simulator. Realistic scenario-based questions with detailed explanations help you assess your readiness to build generative AI solutions on AWS.",982,"2026-10-29T00:00:00.000Z",{"title":66,"subtitle":67,"slug":68,"coverImageUrl":37},"AWS Certified Generative AI Developer - Professional","AIP-C01","aws-certified-generative-ai-developer-professional",{"slug":61,"pageSlug":68},{"id":71,"slug":72,"description":73,"questionCount":74,"isActive":9,"datePublicModified":64,"difficulty":75,"examVersion":79},19,"aws-certified-machine-learning-engineer-associate-mla-c02","Prepare for the AWS Certified Machine Learning Engineer - Associate exam with our practice exam simulator. Realistic questions with detailed explanations help you find your knowledge gaps and assess your readiness to build and run ML workloads on AWS.",861,{"title":76,"subtitle":77,"slug":78,"coverImageUrl":37},"AWS Certified Machine Learning Engineer - Associate","MLA-C02","aws-certified-machine-learning-engineer-associate",{"slug":72,"pageSlug":78},{"id":81,"slug":82,"description":83,"questionCount":84,"isActive":9,"datePublicModified":64,"difficulty":85,"examVersion":89},21,"aws-certified-cloudops-engineer-associate-soa-c03","Prepare for the AWS Certified CloudOps Engineer - Associate exam with our practice exam simulator. Realistic questions with detailed explanations help you assess your readiness to deploy, operate and troubleshoot workloads on AWS.",862,{"title":86,"subtitle":87,"slug":88,"coverImageUrl":37},"AWS Certified CloudOps Engineer - Associate","SOA-C03","aws-certified-cloudops-engineer-associate",{"slug":82,"pageSlug":88},{"id":91,"slug":92,"description":93,"questionCount":94,"isActive":9,"datePublicModified":64,"difficulty":95,"examVersion":100},13,"aws-certified-security-specialty-scs-c03","Advance your career in cloud security with the AWS Certified Security - Specialty (SCS-C03) Exam Simulator. Realistic, scenario-based practice exams mirror the official exam, with detailed explanations to close your knowledge gaps.",864,{"title":96,"subtitle":97,"slug":98,"coverImageUrl":99},"AWS Certified Security - Specialty","SCS-C03","aws-certified-security-specialty","\u002Fimages\u002Fdifficulties\u002Faws-certified-security-specialtyscs-c02\u002Fcovers\u002Faws_SCS_c02.png",{"slug":92,"pageSlug":98},{"id":102,"slug":103,"description":104,"questionCount":105,"isActive":9,"datePublicModified":64,"difficulty":106,"examVersion":110},15,"aws-certified-ai-business-strategist-aib-c01","Prepare for the AWS Certified AI Business Strategist exam with our practice exam simulator. Realistic, scenario-based questions with detailed explanations help you assess your readiness to lead AI adoption on AWS and close your knowledge gaps.",848,{"title":107,"subtitle":108,"slug":109,"coverImageUrl":37},"AWS Certified AI Business Strategist","AIB-C01","aws-certified-ai-business-strategist",{"slug":103,"pageSlug":109},{"id":112,"slug":113,"description":114,"questionCount":115,"isActive":9,"datePublicModified":116,"difficulty":117,"examVersion":121},10,"aws-certified-advanced-networking-specialty-ans-c01","The AWS Certified Advanced Networking - Specialty practice exam simulates the real test, offering scenario-based questions that assess your ability to design, implement, and troubleshoot complex AWS networking solutions. ",681,"2024-11-13T00:00:00.000Z",{"title":118,"subtitle":119,"slug":120,"coverImageUrl":37},"AWS Certified Advanced Networking - Specialty","ANS-C01","aws-certified-advanced-networking-specialty",{"slug":113,"pageSlug":120},{"id":123,"slug":124,"description":125,"questionCount":126,"isActive":9,"datePublicModified":127,"difficulty":128,"examVersion":133},4,"aws-certified-developer-associate-dva-c02","Unlock your potential as a software developer with the AWS Certified Developer - Associate Exam Simulator! Prepare thoroughly with realistic practice exams designed to mirror the official exam.",399,"2024-06-06T00:00:00.000Z",{"title":129,"subtitle":130,"slug":131,"coverImageUrl":132},"AWS Certified Developer - Associate","DVA-C02","aws-certified-developer-associate","\u002Fimages\u002Fdifficulties\u002Faws-certified-developer-associatedva-c02\u002Fcovers\u002Faws-DVA-C02.png",{"slug":124,"pageSlug":131},{"id":135,"slug":136,"description":137,"questionCount":138,"isActive":9,"datePublicModified":127,"difficulty":139,"examVersion":144},6,"aws-certified-solutions-architect-professional-sap-c02","Elevate your career with the AWS Certified Solutions Architect - Professional Exam Simulator. Get ready to ace the most popular Professional AWS exam with our realistic practice exams. Assess your readiness, boost your confidence, and ensure your success.",789,{"title":140,"subtitle":141,"slug":142,"coverImageUrl":143},"AWS Certified Solutions Architect - Professional","SAP-C02","aws-certified-solutions-architect-professional","\u002Fimages\u002Fdifficulties\u002Faws-certified-solutions-architect-professionalsap-c02\u002Fcovers\u002Faws-SAP-C02.png",{"slug":136,"pageSlug":142},{"id":146,"slug":147,"description":148,"questionCount":149,"isActive":9,"datePublicModified":127,"difficulty":150,"examVersion":151},7,"aws-certified-security-specialty-scs-c02","Advance your career in cloud cybersecurity with the AWS Certified Security - Specialty Exam Simulator! Tailored for professionals, this tool offers realistic practice exams to mirror the official exam.",5431,{"title":96,"subtitle":97,"slug":98,"coverImageUrl":99},{"slug":147,"pageSlug":152},null,{"id":91,"slug":92,"description":93,"content":37,"formalQuestionCount":154,"minQuestionCount":5,"maxQuestionCount":154,"formalTimeLimitCount":155,"minTimeLimitCount":112,"maxTimeLimitCount":156,"passingScore":157,"questionCount":94,"isActive":9,"dateCreated":158,"dateModified":159,"datePublicModified":64,"difficulty":160,"examVersion":541,"tags":542,"previousExamVersion":543,"newerExamVersion":152},65,170,200,75,"2026-10-29T23:43:26.741Z","2026-10-29T23:58:16.000Z",{"id":18,"title":96,"subtitle":97,"rating":161,"slug":98,"guideUrl":162,"categories":163,"services":384},4.5,"https:\u002F\u002Fd1.awsstatic.com\u002Ftraining-and-certification\u002Fdocs-security-spec\u002FAWS-Certified-Security-Specialty_Exam-Guide.pdf",[164,204,238,276,310,347],{"id":165,"title":166,"subtitle":152,"description":152,"content":152,"coverImageUrl":152,"weight":167,"subcategories":168},118,"Detection",16,[169,173,177],{"id":170,"title":171,"subtitle":152,"description":152,"questions":172},444,"Design and implement monitoring and alerting solutions for an AWS account or organization",[],{"id":174,"title":175,"subtitle":152,"description":152,"questions":176},445,"Design and implement logging solutions",[],{"id":178,"title":179,"subtitle":152,"description":152,"questions":180},446,"Troubleshoot security monitoring, logging, and alerting solutions",[181],{"id":182,"subcategoryId":178,"content":183,"hint":184,"type":185,"isPublic":9,"answers":186},52542,"A company uses the unified CloudWatch agent on Amazon EC2 instances to collect operating system security logs. After a least-privilege IAM policy update, agent metrics continue to arrive, but newly launched instances do not deliver logs to the existing \u002Fsecurity\u002Flinux log group. The agent reports AccessDeniedException for logs:CreateLogStream.\n\nThe agent uses the instance profile role. The role's only statement granting logs:CreateLogStream and logs:PutLogEvents allows both actions with this Resource value:\narn:aws:logs:us-east-1:111122223333:log-group:\u002Fsecurity\u002Flinux\n\nThe configured log group and Region are correct. Network connectivity and local file permissions have been verified, and no other policies restrict these actions. Which change will restore log delivery while maintaining least privilege?","Check which resource type each failed API action authorizes against, rather than only whether the action appears in an Allow statement.","single",[187,191,196,200],{"id":188,"questionId":182,"content":189,"hint":190,"isCorrect":9,"position":152,"matchAnswerId":152},236408,"Change the Resource for both actions to arn:aws:logs:us-east-1:111122223333:log-group:\u002Fsecurity\u002Flinux:log-stream:* in the instance profile role's policy.","CreateLogStream and PutLogEvents authorize access to log-stream resources. The existing ARN identifies only the log group and does not match its log streams. The replacement ARN permits both operations on streams within the intended group without granting access to other groups.",{"id":192,"questionId":182,"content":193,"hint":194,"isCorrect":195,"position":152,"matchAnswerId":152},236409,"Keep the instance profile policy unchanged and add a CloudWatch Logs resource policy allowing the ec2.amazonaws.com service principal to perform logs:CreateLogStream and logs:PutLogEvents on the group's streams.","The agent makes these API calls using the instance profile role's credentials, not as the EC2 service principal. A resource policy granting permissions to ec2.amazonaws.com would not correct the agent role's resource-scoping error.",false,{"id":197,"questionId":182,"content":198,"hint":199,"isCorrect":195,"position":152,"matchAnswerId":152},236410,"Keep the existing statement and add logs:CreateLogGroup with Resource set to arn:aws:logs:us-east-1:111122223333:log-group:\u002Fsecurity\u002Flinux.","The log group already exists. Permission to create a log group does not grant permission to create its log streams or write events to them, so the reported authorization failure would remain.",{"id":201,"questionId":182,"content":202,"hint":203,"isCorrect":195,"position":152,"matchAnswerId":152},236411,"Keep logs:CreateLogStream scoped to the existing log group ARN, but move logs:PutLogEvents to a separate statement scoped to arn:aws:logs:us-east-1:111122223333:log-group:\u002Fsecurity\u002Flinux:log-stream:*.","This corrects the resource scope for writing events but leaves CreateLogStream scoped to the wrong resource type. Newly launched instances still cannot create their log streams.",{"id":205,"title":206,"subtitle":152,"description":152,"content":152,"coverImageUrl":152,"weight":207,"subcategories":208},119,"Incident Response",14,[209,213],{"id":210,"title":211,"subtitle":152,"description":152,"questions":212},447,"Design and test an incident response plan",[],{"id":214,"title":215,"subtitle":152,"description":152,"questions":216},448,"Respond to security events",[217],{"id":218,"subcategoryId":214,"content":219,"hint":220,"type":185,"isPublic":9,"answers":221},53367,"An incident response team stores original system and application log archives in a versioned Amazon S3 evidence bucket. Each object version has a 90-day S3 Object Lock compliance-mode retention period. Lifecycle rules expire current objects and permanently delete eligible noncurrent versions after the approved retention period.\n\nLegal counsel identifies specific object version IDs that must be preserved for litigation. Their retention periods expire tomorrow, but the litigation has no known end date. Unrelated evidence must continue through normal disposal. After counsel authorizes release, the selected versions must become eligible for normal disposal without an additional fixed retention period. Automated cleanup roles can delete object versions but cannot change Object Lock retention settings or legal holds.\n\nWhich action meets these requirements?","Consider how to suspend disposal for selected existing versions when the exception has no predictable end date.",[222,226,230,234],{"id":223,"questionId":218,"content":224,"hint":225,"isCorrect":195,"position":152,"matchAnswerId":152},240375,"Change the bucket's default Object Lock retention to an extended governance-mode period, and restore the 90-day default when counsel authorizes release.","Changing the bucket default does not retroactively change retention settings on existing object versions. It would affect newly uploaded versions rather than preserve the specific versions identified by counsel.",{"id":227,"questionId":218,"content":228,"hint":229,"isCorrect":9,"position":152,"matchAnswerId":152},240376,"Apply an S3 Object Lock legal hold to each identified object version. Leave the lifecycle rules unchanged, and remove the holds only after counsel authorizes release.","A legal hold protects an individual object version from permanent deletion without requiring an expiration date. Lifecycle processing and cleanup roles cannot permanently delete held versions. Unrelated versions remain subject to normal disposal. Once the holds are removed and the original retention periods have expired, the selected versions become eligible for normal disposal.",{"id":231,"questionId":218,"content":232,"hint":233,"isCorrect":195,"position":152,"matchAnswerId":152},240377,"Tag the selected versions as litigation evidence and change the lifecycle rules to exclude that evidence until counsel authorizes release.","Excluding evidence from lifecycle expiration does not protect it from explicit permanent deletion by automated cleanup roles after its compliance retention expires. Tags and lifecycle exclusions are not a substitute for a version-level deletion protection control.",{"id":235,"questionId":218,"content":236,"hint":237,"isCorrect":195,"position":152,"matchAnswerId":152},240378,"Extend the compliance-mode retention of each selected version by 10 years, and shorten its retain-until date when counsel authorizes release.","Compliance-mode retention cannot be shortened, even by the account root user. A fixed 10-year extension could unnecessarily prevent disposal after counsel releases the evidence and does not address an exception of unknown duration.",{"id":239,"title":240,"subtitle":152,"description":152,"content":152,"coverImageUrl":152,"weight":241,"subcategories":242},120,"Infrastructure Security",18,[243,247,272],{"id":244,"title":245,"subtitle":152,"description":152,"questions":246},449,"Design, implement, and troubleshoot security controls for network edge services",[],{"id":248,"title":249,"subtitle":152,"description":152,"questions":250},450,"Design, implement, and troubleshoot security controls for compute workloads",[251],{"id":252,"subcategoryId":248,"content":253,"hint":254,"type":185,"isPublic":9,"answers":255},53011,"A manufacturer uses an Amazon SageMaker AI real-time endpoint to summarize confidential engineering documents. The model must receive the complete documents to produce useful summaries. The endpoint has data capture enabled for requests and responses, and the application also writes request and response bodies to diagnostic logs.\n\nA security review finds confidential document text in both telemetry destinations. Company policy permits processing this text during inference but prohibits storing it in inference-monitoring data or diagnostic logs. Operations engineers must retain request correlation IDs, latency measurements, response status codes, and token counts. They do not require document text or generated summaries.\n\nWhich change meets these requirements?","Consider where sensitive content becomes persistent telemetry, rather than how access to that telemetry is secured afterward.",[256,260,264,268],{"id":257,"questionId":252,"content":258,"hint":259,"isCorrect":195,"position":152,"matchAnswerId":152},238697,"Configure automated sensitive-data discovery for the telemetry storage and trigger a remediation workflow that deletes objects and log records containing confidential document text.","Discovery and deletion occur after the confidential text has been stored. This can support investigation or cleanup, but it does not satisfy a policy that prohibits the initial persistence of that content.",{"id":261,"questionId":252,"content":262,"hint":263,"isCorrect":195,"position":152,"matchAnswerId":152},238698,"Encrypt the data capture objects and diagnostic logs with a customer managed AWS KMS key, and restrict decryption permissions to the security team.","Encryption and restricted decryption permissions protect stored telemetry from unauthorized access, but confidential text would still be stored in both destinations. This violates the prohibition on storing that content in telemetry.",{"id":265,"questionId":252,"content":266,"hint":267,"isCorrect":9,"position":152,"matchAnswerId":152},238699,"Disable endpoint request and response data capture. Replace application body logging with an allowlist-based telemetry record containing only the required operational fields, and ensure error-handling paths do not log payloads.","This prevents confidential payloads from being persisted through either identified telemetry path while preserving the operational information engineers need. The complete documents can still be sent to the model for inference. Applying the same restriction to error paths prevents exceptions or debugging logic from bypassing the control.",{"id":269,"questionId":252,"content":270,"hint":271,"isCorrect":195,"position":152,"matchAnswerId":152},238700,"Add a system instruction requiring the model to omit confidential document text from its summaries, and configure endpoint data capture to retain requests only.","Request capture would still store the complete confidential documents, and application body logging would remain another disclosure path. Model instructions do not control the endpoint's capture mechanism or the application's logging behavior.",{"id":273,"title":274,"subtitle":152,"description":152,"questions":275},451,"Design and troubleshoot network security controls",[],{"id":277,"title":278,"subtitle":152,"description":152,"content":152,"coverImageUrl":152,"weight":279,"subcategories":280},121,"Identity and Access Management",20,[281,285],{"id":282,"title":283,"subtitle":152,"description":152,"questions":284},452,"Design, implement, and troubleshoot authentication strategies",[],{"id":286,"title":287,"subtitle":152,"description":152,"questions":288},453,"Design, implement, and troubleshoot authorization strategies",[289],{"id":290,"subcategoryId":286,"content":291,"hint":292,"type":185,"isPublic":9,"answers":293},53191,"A company uses one shared IAM role for application operators. Each operator session has trusted Project and Environment principal tags that operators cannot change. EC2 instances have corresponding resource tags maintained by a provisioning service. Some legacy instances are missing one or both tags.\n\nOperators must be able to reboot an instance only when BOTH instance tag values match the corresponding principal tag values. Instances missing either tag must remain inaccessible. Operators cannot modify instance tags, assume other roles, or change IAM policies. The role currently has no EC2 permissions, and no other policies grant or restrict the requested access.\n\nA security engineer will scope all new statements to EC2 instance ARNs in the approved account and Region. Which policy configuration meets these requirements?","Consider how IAM combines multiple condition keys within a statement, how it combines separate Allow statements, and what happens when a resource tag is absent.",[294,298,302,306],{"id":295,"questionId":290,"content":296,"hint":297,"isCorrect":195,"position":152,"matchAnswerId":152},239560,"Add two Allow statements for ec2:RebootInstances. In one statement, use StringEquals to compare ec2:ResourceTag\u002FProject with ${aws:PrincipalTag\u002FProject}. In the other, use StringEquals to compare ec2:ResourceTag\u002FEnvironment with ${aws:PrincipalTag\u002FEnvironment}.","Separate Allow statements provide alternative ways to authorize a request. An instance would be accessible if either its Project or its Environment matched, even when the other attribute differed or was missing.",{"id":299,"questionId":290,"content":300,"hint":301,"isCorrect":195,"position":152,"matchAnswerId":152},239561,"Add one Allow statement for ec2:RebootInstances with this condition: {\"StringEqualsIfExists\":{\"ec2:ResourceTag\u002FProject\":\"${aws:PrincipalTag\u002FProject}\",\"ec2:ResourceTag\u002FEnvironment\":\"${aws:PrincipalTag\u002FEnvironment}\"}}.","StringEqualsIfExists treats an absent condition key as satisfying that condition. This configuration could authorize access to an instance missing one tag if the other matched, or to an instance missing both tags.",{"id":303,"questionId":290,"content":304,"hint":305,"isCorrect":9,"position":152,"matchAnswerId":152},239562,"Add one Allow statement for ec2:RebootInstances with this condition: {\"StringEquals\":{\"ec2:ResourceTag\u002FProject\":\"${aws:PrincipalTag\u002FProject}\",\"ec2:ResourceTag\u002FEnvironment\":\"${aws:PrincipalTag\u002FEnvironment}\"}}.","Both condition keys must evaluate to true within the same statement. Each resource tag must therefore match its corresponding trusted principal tag. If either resource tag is absent, its StringEquals comparison does not match, and the statement does not grant access.",{"id":307,"questionId":290,"content":308,"hint":309,"isCorrect":195,"position":152,"matchAnswerId":152},239563,"Add an unconditional Allow for ec2:RebootInstances. Add a Deny for the same action with this condition: {\"StringNotEquals\":{\"ec2:ResourceTag\u002FProject\":\"${aws:PrincipalTag\u002FProject}\",\"ec2:ResourceTag\u002FEnvironment\":\"${aws:PrincipalTag\u002FEnvironment}\"}}.","The two condition keys in the Deny statement are combined with AND. The Deny applies only when both comparisons are unequal. If one attribute matches and the other differs or is missing, the Deny does not apply, and the unconditional Allow authorizes the reboot.",{"id":311,"title":312,"subtitle":152,"description":152,"content":152,"coverImageUrl":152,"weight":241,"subcategories":313},122,"Data Protection",[314,318,343],{"id":315,"title":316,"subtitle":152,"description":152,"questions":317},454,"Design and implement controls for data in transit",[],{"id":319,"title":320,"subtitle":152,"description":152,"questions":321},455,"Design and implement controls for data at rest",[322],{"id":323,"subcategoryId":319,"content":324,"hint":325,"type":185,"isPublic":9,"answers":326},53255,"A company stores sensitive daily exports in an S3 bucket and uses S3 Cross-Region Replication to copy them to a disaster recovery bucket. Both buckets have versioning enabled. Each export uses a unique key and is never overwritten. All replication operations complete successfully before the exports reach their retention limits. Neither bucket uses Object Lock.\n\nThe approved retention schedule makes current objects eligible for expiration 365 days after creation and their noncurrent versions eligible for permanent deletion 1 day after becoming noncurrent. The source bucket already has S3 Lifecycle rules implementing this schedule and cleaning up expired object delete markers. The destination bucket has no Lifecycle rules, and an audit finds that old replicas remain there after their source versions have been permanently deleted.\n\nWhich change will apply the approved automatic disposal schedule to both existing and future replicas with the least operational overhead?","Consider whether replication carries out a source bucket's lifecycle actions or whether each bucket must manage its own stored versions.",[327,331,335,339],{"id":328,"questionId":323,"content":329,"hint":330,"isCorrect":9,"position":152,"matchAnswerId":152},239837,"Configure destination bucket Lifecycle rules to expire current objects after 365 days, permanently delete noncurrent versions after 1 day, and remove expired object delete markers.","Lifecycle configurations are independent for source and destination buckets. Destination rules apply to existing and future matching replicas. Replicas retain the original objects' creation times for age-based Lifecycle processing. Current-version expiration, noncurrent-version expiration, and expired delete marker cleanup together implement the approved disposal schedule.",{"id":332,"questionId":323,"content":333,"hint":334,"isCorrect":195,"position":152,"matchAnswerId":152},239838,"Grant the replication role s3:DeleteObjectVersion on the destination bucket so that permanent deletions performed by the source Lifecycle rules propagate to the replicas.","Additional permissions do not change replication behavior. S3 replication does not propagate permanent deletion of specific source object versions, including deletion by Lifecycle rules, to their destination replicas.",{"id":336,"questionId":323,"content":337,"hint":338,"isCorrect":195,"position":152,"matchAnswerId":152},239839,"Enable delete marker replication on the replication rule and retain the existing source bucket Lifecycle configuration.","S3 does not replicate delete markers created by Lifecycle expiration. Additionally, replicating a delete marker would not permanently delete the underlying replica versions. The destination still needs its own disposal controls.",{"id":340,"questionId":323,"content":341,"hint":342,"isCorrect":195,"position":152,"matchAnswerId":152},239840,"Configure the destination bucket to expire current objects after 365 days and remove expired object delete markers, without configuring noncurrent-version expiration.","In a versioned bucket, expiring a current object generally creates a delete marker and makes the data version noncurrent. Without noncurrent-version expiration, the replica's data remains stored. Expired object delete marker cleanup does not delete those retained data versions.",{"id":344,"title":345,"subtitle":152,"description":152,"questions":346},456,"Design and implement controls to protect confidential data, credentials, secrets, and cryptographic key materials",[],{"id":348,"title":349,"subtitle":152,"description":152,"content":152,"coverImageUrl":152,"weight":207,"subcategories":350},123,"Security Foundations and Governance",[351,376,380],{"id":352,"title":353,"subtitle":152,"description":152,"questions":354},457,"Develop a strategy to centrally deploy and manage AWS accounts",[355],{"id":356,"subcategoryId":352,"content":357,"hint":358,"type":185,"isPublic":9,"answers":359},53259,"A company uses an AWS Control Tower landing zone to govern its AWS accounts. The security team has developed a CloudFormation template that deploys a company-specific AWS Config rule and its supporting resources without modifying Control Tower-managed resources.\n\nPlatform operators must be able to select this approved security customization and its version when creating workload accounts through the Control Tower console. The customization must be deployed as part of the account provisioning workflow. The company does not want to modify the Control Tower-managed Account Factory product or maintain a separate post-provisioning automation pipeline.\n\nWhich solution meets these requirements?","Distinguish extending the account provisioning workflow with an approved blueprint from modifying the managed account product or enabling a control that evaluates resources.",[360,364,368,372],{"id":361,"questionId":356,"content":362,"hint":363,"isCorrect":195,"position":152,"matchAnswerId":152},239856,"Add the template's resources to a new provisioning artifact of the Control Tower-managed Account Factory product in AWS Service Catalog. Make that artifact the default version for workload account requests.","This approach modifies the Control Tower-managed Account Factory product, which the requirements explicitly prohibit. Account Factory Customization provides the supported extension mechanism by using a separate blueprint product.",{"id":365,"questionId":356,"content":366,"hint":367,"isCorrect":9,"position":152,"matchAnswerId":152},239857,"Publish the template as a versioned AWS Service Catalog product in a blueprint hub account. Configure Account Factory Customization and select the product's blueprint and version when provisioning each workload account.","Account Factory Customization integrates Service Catalog blueprint products into Control Tower account provisioning. A blueprint can deploy custom security resources from a CloudFormation template. Operators can select the approved blueprint and version during account creation without modifying the Control Tower-managed Account Factory product or maintaining a separate deployment pipeline.",{"id":369,"questionId":356,"content":370,"hint":371,"isCorrect":195,"position":152,"matchAnswerId":152},239858,"Publish the template as a versioned AWS Service Catalog product and share its portfolio with the workload OU. Grant platform operators access to the product so that portfolio sharing deploys it when Control Tower creates an account.","Sharing a portfolio makes its products available to recipient accounts but does not provision those products. Portfolio sharing alone does not connect product deployment to the Control Tower account creation workflow.",{"id":373,"questionId":356,"content":374,"hint":375,"isCorrect":195,"position":152,"matchAnswerId":152},239859,"Register the template as an optional proactive control in AWS Control Tower and enable it on the workload OU. Select the control version during account creation to deploy the rule into each new account.","Proactive controls evaluate supported CloudFormation resources before provisioning; they do not deploy arbitrary templates or their supporting resources. An organization cannot register this template as an optional managed proactive control to extend account provisioning.",{"id":377,"title":378,"subtitle":152,"description":152,"questions":379},458,"Implement a secure and consistent deployment strategy for cloud resources",[],{"id":381,"title":382,"subtitle":152,"description":152,"questions":383},459,"Evaluate the compliance of AWS resources",[],[385,391,397,403,409,415,421,427,433,439,445,451,457,463,469,475,481,487,493,499,505,511,517,523,529,535],{"id":386,"title":387,"description":388,"slug":389,"coverImageUrl":390},93,"AWS CloudTrail","AWS CloudTrail is a service that provides a comprehensive log of user activity and API usage across the AWS infrastructure, enabling security monitoring, compliance auditing, and operational troubleshooting.","aws-cloudtrail","\u002Fimages\u002Fprovider-services\u002Faws-cloudtrail\u002Fcovers\u002FArch_AWS-CloudTrail_64.png",{"id":392,"title":393,"description":394,"slug":395,"coverImageUrl":396},95,"Amazon CloudWatch","Amazon CloudWatch is a monitoring and observability service offered by Amazon Web Services (AWS) that provides data and actionable insights to monitor applications, respond to system-wide performance changes, optimize resource utilization, and get a unified view of operational health.","amazon-cloudwatch","\u002Fimages\u002Fprovider-services\u002Famazon-cloudwatch\u002Fcovers\u002FArch_Amazon-CloudWatch_64.png",{"id":398,"title":399,"description":400,"slug":401,"coverImageUrl":402},96,"AWS Command Line Interface (AWS CLI)","The AWS Command Line Interface (AWS CLI) is a unified tool that allows you to manage and automate AWS services directly from the terminal or command prompt.","aws-command-line-interface-(aws-cli)","\u002Fimages\u002Fprovider-services\u002Faws-command-line-interface-(aws-cli)\u002Fcovers\u002FArch_AWS-Command-Line-Interface_64.png",{"id":404,"title":405,"description":406,"slug":407,"coverImageUrl":408},98,"AWS Config","AWS Config is a service that enables you to assess, audit, and evaluate the configurations of your AWS resources, providing a detailed view of their compliance with the configurations specified by your internal guidelines and regulatory standards.","aws-config","\u002Fimages\u002Fprovider-services\u002Faws-config\u002Fcovers\u002FArch_AWS-Config_64.png",{"id":410,"title":411,"description":412,"slug":413,"coverImageUrl":414},107,"AWS Management Console","The AWS Management Console is a web-based interface that allows users to access and manage Amazon Web Services (AWS) and its resources, offering an intuitive and easy-to-navigate user experience for configuring AWS services, monitoring their performance, and managing billing and security.","aws-management-console","\u002Fimages\u002Fprovider-services\u002Faws-management-console\u002Fcovers\u002FArch_AWS-Management-Console_64.png",{"id":416,"title":417,"description":418,"slug":419,"coverImageUrl":420},108,"AWS Organizations","AWS Organizations is a cloud service from Amazon Web Services that allows you to centrally manage and govern your environment as you scale your AWS resources across multiple accounts.","aws-organizations","\u002Fimages\u002Fprovider-services\u002Faws-organizations\u002Fcovers\u002FArch_AWS-Organizations_64.png",{"id":422,"title":423,"description":424,"slug":425,"coverImageUrl":426},112,"AWS Systems Manager","AWS Systems Manager is a management service that provides visibility and control over your AWS resources, enabling you to automate operational tasks, gather system inventory, apply OS patches, automate the creation of Amazon Machine Images, and configure your operating systems and applications.","aws-systems-manager","\u002Fimages\u002Fprovider-services\u002Faws-systems-manager\u002Fcovers\u002FArch_AWS-Systems-Manager_64.png",{"id":428,"title":429,"description":430,"slug":431,"coverImageUrl":432},113,"AWS Trusted Advisor","AWS Trusted Advisor is an online tool that helps users optimize their Amazon Web Services (AWS) infrastructure for cost, performance, security, and fault tolerance by evaluating their environment and offering recommendations based on best practices.","aws-trusted-advisor","\u002Fimages\u002Fprovider-services\u002Faws-trusted-advisor\u002Fcovers\u002FArch_AWS-Trusted-Advisor_64.png",{"id":434,"title":435,"description":436,"slug":437,"coverImageUrl":438},136,"Amazon VPC","Amazon VPC (Virtual Private Cloud) is a service that allows users to launch AWS resources in a logically isolated virtual network that they can define and control, including IP address ranges, subnets, route tables, and gateways.","amazon-vpc","\u002Fimages\u002Fprovider-services\u002Famazon-vpc\u002Fcovers\u002FVirtual-private-cloud-VPC_32.png",{"id":440,"title":441,"description":442,"slug":443,"coverImageUrl":444},138,"AWS Audit Manager","AWS Audit Manager is a cloud service provided by Amazon Web Services that helps users automate the process of auditing and compliance by continuously collecting evidence, thus enabling them to assess their AWS environment against industry standards and regulations. AWS Audit Manager has been in maintenance since March 31, 2026 and is closed to new customers; existing customers can continue using it.","aws-audit-manager","\u002Fimages\u002Fprovider-services\u002Faws-audit-manager\u002Fcovers\u002FArch_AWS-Audit-Manager_64.png",{"id":446,"title":447,"description":448,"slug":449,"coverImageUrl":450},141,"AWS Certificate Manager (ACM)","AWS Certificate Manager (ACM) is a service provided by Amazon Web Services that simplifies the creation, management, and deployment of SSL\u002FTLS certificates for use with AWS services and your internal connected resources.","aws-certificate-manager-(acm)","\u002Fimages\u002Fprovider-services\u002Faws-certificate-manager-(acm)\u002Fcovers\u002FArch_AWS-Certificate-Manager_64.png",{"id":452,"title":453,"description":454,"slug":455,"coverImageUrl":456},142,"AWS CloudHSM","AWS CloudHSM is a cloud-based hardware security module service offered by Amazon Web Services that provides key storage and cryptographic operations within a tamper-resistant hardware appliance.","aws-cloudhsm","\u002Fimages\u002Fprovider-services\u002Faws-cloudhsm\u002Fcovers\u002FArch_AWS-CloudHSM_64.png",{"id":458,"title":459,"description":460,"slug":461,"coverImageUrl":462},144,"Amazon Detective","Amazon Detective is a security service that automatically collects, organizes, and analyzes data from AWS resources to help users easily investigate and quickly identify the root cause of potential security issues or suspicious activities.","amazon-detective","\u002Fimages\u002Fprovider-services\u002Famazon-detective\u002Fcovers\u002FArch_Amazon-Detective_64.png",{"id":464,"title":465,"description":466,"slug":467,"coverImageUrl":468},145,"AWS Directory Service","AWS Directory Service is a managed service provided by Amazon Web Services that allows users to connect AWS resources with an existing on-premises Microsoft Active Directory or to set up and operate a new, fully managed directory in the AWS Cloud.","aws-directory-service","\u002Fimages\u002Fprovider-services\u002Faws-directory-service\u002Fcovers\u002FArch_AWS-Directory-Service_64.png",{"id":470,"title":471,"description":472,"slug":473,"coverImageUrl":474},146,"AWS Firewall Manager","AWS Firewall Manager is a security management service that allows you to centrally configure and manage firewall rules across your Amazon Web Services (AWS) accounts and applications, simplifying your AWS network firewall administration.","aws-firewall-manager","\u002Fimages\u002Fprovider-services\u002Faws-firewall-manager\u002Fcovers\u002FArch_AWS-Firewall-Manager_64.png",{"id":476,"title":477,"description":478,"slug":479,"coverImageUrl":480},147,"Amazon GuardDuty","Amazon GuardDuty is a threat detection service that continuously monitors for malicious activity and unauthorized behavior to protect your AWS accounts and workloads.","amazon-guardduty","\u002Fimages\u002Fprovider-services\u002Famazon-guardduty\u002Fcovers\u002FArch_Amazon-GuardDuty_64.png",{"id":482,"title":483,"description":484,"slug":485,"coverImageUrl":486},148,"AWS IAM Identity Center (AWS Single Sign-On)","AWS IAM Identity Center (formerly AWS Single Sign-On) is a cloud service that enables secure and unified authentication for users to access AWS accounts and business applications with a single set of credentials.","aws-iam-identity-center-(aws-single-sign-on)","\u002Fimages\u002Fprovider-services\u002Faws-iam-identity-center-(aws-single-sign-on)\u002Fcovers\u002FArch_AWS-IAM-Identity-Center_64.png",{"id":488,"title":489,"description":490,"slug":491,"coverImageUrl":492},149,"AWS Identity and Access Management (IAM)","AWS Identity and Access Management (IAM) is a cloud service that helps securely control access to AWS resources by allowing you to create and manage AWS users and groups, and use permissions to allow and deny their access to AWS resources.","aws-identity-and-access-management-(iam)","\u002Fimages\u002Fprovider-services\u002Faws-identity-and-access-management-(iam)\u002Fcovers\u002FArch_AWS-Identity-and-Access-Management_64.png",{"id":494,"title":495,"description":496,"slug":497,"coverImageUrl":498},150,"Amazon Inspector","Amazon Inspector is a security assessment service offered by Amazon Web Services (AWS) that automatically assesses applications for vulnerabilities or deviations from best practices, and produces a detailed list of security findings prioritized by level of severity.","amazon-inspector","\u002Fimages\u002Fprovider-services\u002Famazon-inspector\u002Fcovers\u002FArch_Amazon-Inspector_64.png",{"id":500,"title":501,"description":502,"slug":503,"coverImageUrl":504},151,"AWS Key Management Service (AWS KMS)","AWS Key Management Service (AWS KMS) is a managed service that makes it easy for you to create and control the cryptographic keys used to secure your data across AWS services and in your applications.","aws-key-management-service-(aws-kms)","\u002Fimages\u002Fprovider-services\u002Faws-key-management-service-(aws-kms)\u002Fcovers\u002FArch_AWS-Key-Management-Service_64.png",{"id":506,"title":507,"description":508,"slug":509,"coverImageUrl":510},152,"Amazon Macie","Amazon Macie is a fully managed data security and data privacy service that uses machine learning and pattern matching to discover and protect sensitive data in AWS.","amazon-macie","\u002Fimages\u002Fprovider-services\u002Famazon-macie\u002Fcovers\u002FArch_Amazon-Macie_64.png",{"id":512,"title":513,"description":514,"slug":515,"coverImageUrl":516},153,"AWS Network Firewall","AWS Network Firewall is a managed service provided by Amazon Web Services that enables users to deploy essential network protections such as stateful firewall rules, intrusion detection and prevention, and web filtering within their Virtual Private Cloud (VPC) environments.","aws-network-firewall","\u002Fimages\u002Fprovider-services\u002Faws-network-firewall\u002Fcovers\u002FArch_AWS-Firewall-Manager_64.png",{"id":518,"title":519,"description":520,"slug":521,"coverImageUrl":522},156,"AWS Security Hub","AWS Security Hub is a cloud security management service that aggregates, organizes, and prioritizes security alerts or findings from multiple AWS services and AWS Partner Network (APN) security solutions, providing a comprehensive view of security and compliance across an AWS environment.","aws-security-hub","\u002Fimages\u002Fprovider-services\u002Faws-security-hub\u002Fcovers\u002FArch_AWS-Security-Hub_64.png",{"id":524,"title":525,"description":526,"slug":527,"coverImageUrl":528},157,"AWS Shield","AWS Shield is a managed Distributed Denial of Service (DDoS) protection service that safeguards applications running on AWS against DDoS attacks.","aws-shield","\u002Fimages\u002Fprovider-services\u002Faws-shield\u002Fcovers\u002FArch_AWS-Shield_64.png",{"id":530,"title":531,"description":532,"slug":533,"coverImageUrl":534},158,"AWS WAF","AWS WAF (Web Application Firewall) is a web application firewall service that helps protect web applications and APIs from common web exploits and bots that may affect availability, compromise security, or consume excessive resources.","aws-waf","\u002Fimages\u002Fprovider-services\u002Faws-waf\u002Fcovers\u002FArch_AWS-WAF_64.png",{"id":536,"title":537,"description":538,"slug":539,"coverImageUrl":540},196,"AWS Tools and SDKs","AWS Tools and SDKs are a collection of software and tools provided by Amazon Web Services to facilitate the development, deployment, and management of applications and services on the AWS platform.","aws-tools-and-sdks","\u002Fimages\u002Fprovider-services\u002Faws-tools-and-sdks\u002Fcovers\u002FArch_AWS-Tools-and-SDKs_64.png",{"id":60,"code":97,"slug":92,"dateLastDay":152,"whatChanged":152,"pageSlug":98},[],{"code":544,"slug":147,"pageSlug":152,"isActive":195,"dateLastDay":152,"hasPracticeExam":9,"hasCourse":195},"SCS-C02",[546,558,564],{"id":279,"title":547,"description":548,"difficulties":549},"Infrastructure as code (IaC)","IaC turns infrastructure definitions into repeatable deployment processes that can be reviewed, tested, and automated. It helps engineers create consistent environments, reduce manual errors, and apply security standards across accounts while maintaining a traceable history of changes.",[550],{"id":18,"providerId":5,"title":96,"subtitle":97,"description":152,"content":152,"rating":161,"pricing":551,"ratingContent":152,"scopeContent":152,"useCasesContent":152,"servicesContent":152,"slug":98,"coverImageUrl":99,"guideUrl":162,"isActive":9,"level":552,"validity":152,"singlePremiumPriceCode":553,"doublePremiumPriceCode":554,"dateReleased":152,"dateEnd":152,"dateCreated":555,"dateModified":556,"datePublicModified":557},300,"advanced","price_1PhrVVCIsbcb0FdPwEo6C4hC","price_1PhrVxCIsbcb0FdPj6hzFki1","2024-05-12T19:05:45.649Z","2026-10-29T23:54:54.000Z","1970-01-01T00:00:00.000Z",{"id":559,"title":560,"description":561,"difficulties":562},40,"Secure remote access","Secure remote access combines identity verification, authorization, protected transport, and monitoring to make resources accessible without granting unnecessary network exposure. In cloud environments, it applies to employee application access, administrative sessions, private service access, and connectivity between on-premises networks and cloud workloads.",[563],{"id":18,"providerId":5,"title":96,"subtitle":97,"description":152,"content":152,"rating":161,"pricing":551,"ratingContent":152,"scopeContent":152,"useCasesContent":152,"servicesContent":152,"slug":98,"coverImageUrl":99,"guideUrl":162,"isActive":9,"level":552,"validity":152,"singlePremiumPriceCode":553,"doublePremiumPriceCode":554,"dateReleased":152,"dateEnd":152,"dateCreated":555,"dateModified":556,"datePublicModified":557},{"id":565,"title":566,"description":567,"difficulties":568},41,"Certificate management","It covers certificate issuance, validation, deployment, renewal, revocation, and retirement, together with protection of the keys and trust chains that make certificates useful. In cloud environments, effective certificate management prevents outages from expired certificates and supports authenticated, encrypted communication across public endpoints, internal services, accounts, and Regions.",[569],{"id":18,"providerId":5,"title":96,"subtitle":97,"description":152,"content":152,"rating":161,"pricing":551,"ratingContent":152,"scopeContent":152,"useCasesContent":152,"servicesContent":152,"slug":98,"coverImageUrl":99,"guideUrl":162,"isActive":9,"level":552,"validity":152,"singlePremiumPriceCode":553,"doublePremiumPriceCode":554,"dateReleased":152,"dateEnd":152,"dateCreated":555,"dateModified":556,"datePublicModified":557},[571,577,583,588,593,597,601,605,609,614],{"id":5,"slug":19,"examVersionId":572,"description":573,"difficulty":574,"examVersion":575,"lessonsCount":576},3,"Unlock your cloud computing potential with our interactive AWS course designed for the AWS Certified Cloud Practitioner exam. Gain hands-on experience, understand core AWS services, and confidently ace your certification.",{"id":572,"title":23,"subtitle":24,"slug":25},{"slug":19,"pageSlug":25},353,{"id":578,"slug":6,"examVersionId":5,"description":579,"difficulty":580,"examVersion":581,"lessonsCount":582},2,"Master cloud architecture with our comprehensive interactive course tailored for the AWS Certified Solutions Architect - Associate exam. Learn to design scalable, cost-effective AWS solutions.",{"id":5,"title":12,"subtitle":13,"slug":14},{"slug":6,"pageSlug":14},495,{"id":135,"slug":30,"examVersionId":135,"description":584,"difficulty":585,"examVersion":586,"lessonsCount":587},"Master the AWS Certified DevOps Engineer - Professional (DOP-C02) exam with our interactive course. Engage with hands-on labs, real-world scenarios, and expert guidance to enhance your skills. Learn at your own pace and ensure exam success.",{"id":135,"title":34,"subtitle":35,"slug":36},{"slug":30,"pageSlug":36},381,{"id":146,"slug":41,"examVersionId":146,"description":589,"difficulty":590,"examVersion":591,"lessonsCount":592},"Master the AWS Certified Data Engineer - Associate exam with our interactive course. Explore real-world scenarios and expert guidance to build your skills and pass with confidence. Start your certification journey now!",{"id":146,"title":45,"subtitle":46,"slug":47},{"slug":41,"pageSlug":47},341,{"id":40,"slug":51,"examVersionId":40,"description":37,"difficulty":594,"examVersion":595,"lessonsCount":596},{"id":40,"title":55,"subtitle":56,"slug":57},{"slug":51,"pageSlug":57},246,{"id":50,"slug":92,"examVersionId":60,"description":152,"difficulty":598,"examVersion":599,"lessonsCount":600},{"id":18,"title":96,"subtitle":97,"slug":98},{"slug":92,"pageSlug":98},272,{"id":91,"slug":103,"examVersionId":71,"description":152,"difficulty":602,"examVersion":603,"lessonsCount":604},{"id":50,"title":107,"subtitle":108,"slug":109},{"slug":103,"pageSlug":109},221,{"id":102,"slug":61,"examVersionId":81,"description":152,"difficulty":606,"examVersion":607,"lessonsCount":608},{"id":91,"title":66,"subtitle":67,"slug":68},{"slug":61,"pageSlug":68},368,{"id":60,"slug":72,"examVersionId":610,"description":152,"difficulty":611,"examVersion":612,"lessonsCount":613},23,{"id":102,"title":76,"subtitle":77,"slug":78},{"slug":72,"pageSlug":78},391,{"id":71,"slug":82,"examVersionId":615,"description":152,"difficulty":616,"examVersion":617,"lessonsCount":618},25,{"id":60,"title":86,"subtitle":87,"slug":88},{"slug":82,"pageSlug":88},218,[620,623,626,629,632,635,638,641,644,647,650,653,656,659],{"id":50,"slug":51,"description":52,"questionCount":53,"isActive":9,"datePublicModified":10,"difficulty":621,"examVersion":622},{"title":55,"subtitle":56,"slug":57,"coverImageUrl":37},{"slug":51,"pageSlug":57},{"id":5,"slug":6,"description":7,"questionCount":8,"isActive":9,"datePublicModified":10,"difficulty":624,"examVersion":625},{"title":12,"subtitle":13,"slug":14,"coverImageUrl":15},{"slug":6,"pageSlug":14},{"id":18,"slug":19,"description":20,"questionCount":21,"isActive":9,"datePublicModified":10,"difficulty":627,"examVersion":628},{"title":23,"subtitle":24,"slug":25,"coverImageUrl":26},{"slug":19,"pageSlug":25},{"id":29,"slug":30,"description":31,"questionCount":32,"isActive":9,"datePublicModified":10,"difficulty":630,"examVersion":631},{"title":34,"subtitle":35,"slug":36,"coverImageUrl":37},{"slug":30,"pageSlug":36},{"id":40,"slug":41,"description":42,"questionCount":43,"isActive":9,"datePublicModified":10,"difficulty":633,"examVersion":634},{"title":45,"subtitle":46,"slug":47,"coverImageUrl":37},{"slug":41,"pageSlug":47},{"id":91,"slug":92,"description":93,"questionCount":94,"isActive":9,"datePublicModified":64,"difficulty":636,"examVersion":637},{"title":96,"subtitle":97,"slug":98,"coverImageUrl":99},{"slug":92,"pageSlug":98},{"id":102,"slug":103,"description":104,"questionCount":105,"isActive":9,"datePublicModified":64,"difficulty":639,"examVersion":640},{"title":107,"subtitle":108,"slug":109,"coverImageUrl":37},{"slug":103,"pageSlug":109},{"id":60,"slug":61,"description":62,"questionCount":63,"isActive":9,"datePublicModified":64,"difficulty":642,"examVersion":643},{"title":66,"subtitle":67,"slug":68,"coverImageUrl":37},{"slug":61,"pageSlug":68},{"id":71,"slug":72,"description":73,"questionCount":74,"isActive":9,"datePublicModified":64,"difficulty":645,"examVersion":646},{"title":76,"subtitle":77,"slug":78,"coverImageUrl":37},{"slug":72,"pageSlug":78},{"id":81,"slug":82,"description":83,"questionCount":84,"isActive":9,"datePublicModified":64,"difficulty":648,"examVersion":649},{"title":86,"subtitle":87,"slug":88,"coverImageUrl":37},{"slug":82,"pageSlug":88},{"id":112,"slug":113,"description":114,"questionCount":115,"isActive":9,"datePublicModified":116,"difficulty":651,"examVersion":652},{"title":118,"subtitle":119,"slug":120,"coverImageUrl":37},{"slug":113,"pageSlug":120},{"id":123,"slug":124,"description":125,"questionCount":126,"isActive":9,"datePublicModified":127,"difficulty":654,"examVersion":655},{"title":129,"subtitle":130,"slug":131,"coverImageUrl":132},{"slug":124,"pageSlug":131},{"id":135,"slug":136,"description":137,"questionCount":138,"isActive":9,"datePublicModified":127,"difficulty":657,"examVersion":658},{"title":140,"subtitle":141,"slug":142,"coverImageUrl":143},{"slug":136,"pageSlug":142},{"id":146,"slug":147,"description":148,"questionCount":149,"isActive":9,"datePublicModified":127,"difficulty":660,"examVersion":661},{"title":96,"subtitle":97,"slug":98,"coverImageUrl":99},{"slug":147,"pageSlug":152},1793320639781]