Cert Master

SCS-C02 Domain 4: Infrastructure Security

The DevOps team is automating releases and must harden EC2 AMIs. Which design fits best? harden EC2 AMIs.

Multiple choice — select one answer

Answer choices

  1. a. EC2 Image Builder CIS benchmarks
  2. b. AWS WAF managed rule groups
  3. c. S3 Block Public Access at account level
  4. d. AWS Network Firewall

Architectural breakdown & explanation

Hardened images reduce attack surface.

Correct answer(s): a. EC2 Image Builder CIS benchmarks

Exam domain: Domain 4: Infrastructure Security (17% weight on the official guide).

Official documentation & study links

Practice this certification

This page is one question from the AWS Certified Security – Specialty bank. Run a full timed practice exam with domain-weighted random questions in your browser.

Start practice exam View exam overview All certifications