SCS-C02 Domain 4: Infrastructure Security

Operations reports a need to implement bastion-less admin access. What is the MOST operationally efficient solution? implement bastion-less admin access.

Multiple choice — select one answer

Answer choices

  1. a. AWS Network Firewall
  2. b. AWS Shield and Route 53 routing policies
  3. c. SSM State Manager for host firewall rules
  4. d. SSM Session Manager

Architectural breakdown & explanation

Session Manager provides audited shell access.

Correct answer(s): d. SSM Session Manager

Exam domain: Domain 4: Infrastructure Security (17% weight on the official guide).

Official documentation & study links

Practice this certification

This page is one question from the AWS Certified Security – Specialty bank. Run a full timed practice exam with domain-weighted random questions in your browser.