SCS-C02 Domain 4: Infrastructure Security

A hybrid environment must support a goal to manage host-based firewall with SSM without changing application code. What should you implement? manage host-based firewall with SSM.

Multiple choice — select one answer

Answer choices

  1. a. SSM State Manager for host firewall rules
  2. b. AWS WAF managed rule groups
  3. c. EC2 Image Builder CIS benchmarks
  4. d. AWS Shield and Route 53 routing policies

Architectural breakdown & explanation

State Manager enforces host configuration.

Correct answer(s): a. SSM State Manager for host firewall rules

Exam domain: Domain 4: Infrastructure Security (17% weight on the official guide).

Official documentation & study links

Practice this certification

This page is one question from the AWS Certified Security – Specialty bank. Run a full timed practice exam with domain-weighted random questions in your browser.