Which service should you use to enforce CIS benchmarks on instances?
Multiple choice — select one answer
Answer choices
Architectural breakdown & explanation
Compliance reports drift from desired state.
Correct answer(s): b. Systems Manager compliance and Config rules
Exam domain: Domain 4: Security and Compliance (16% weight on the official guide).
Official documentation & study links
Practice this certification
This page is one question from the AWS Certified CloudOps Engineer – Associate bank. Run a full timed practice exam with domain-weighted random questions in your browser.