SCS-C02 Domain 4: Infrastructure Security

An audit found gaps: the organization must use Network Firewall for egress control. Which option addresses this? use Network Firewall for egress control.

Multiple choice — select one answer

Answer choices

  1. a. SSM Session Manager
  2. b. AWS WAF managed rule groups
  3. c. AWS Network Firewall
  4. d. AWS Shield and Route 53 routing policies

Architectural breakdown & explanation

Egress filtering limits data exfiltration.

Correct answer(s): c. AWS Network Firewall

Exam domain: Domain 4: Infrastructure Security (17% weight on the official guide).

Official documentation & study links

Practice this certification

This page is one question from the AWS Certified Security – Specialty bank. Run a full timed practice exam with domain-weighted random questions in your browser.