Skip to content
SCS-C03
Infrastructure Security
medium
Question 6 of 36

A company wants an analysis that flags paths from an internet gateway to network interfaces, except for approved web servers that are a legitimate exception. How should the Network Access Scope be modeled?

AList approved servers only in MatchPaths
BUse MatchPaths for the broad internet-to-interface requirement and ExcludePaths for the approved web servers
CUse ExcludePaths only, because MatchPaths is optional
DUse AWS Config rules instead of Network Access Analyzer scopes

Educational Content — CertQnA practice questions are written against official exam objectives, covering the same domains tested on the real exam. All content is original and independent — not actual exam questions, not affiliated with any certification vendor. Learn more about our content policy

Discussion

Be the first to share your understanding of this concept

⚠️ Discussion is for concept clarification only. Do not share or request actual exam questions or answers.

Sign in to join the discussion