nerdexam
Amazon

CLF-C02 · Question #682

A company is deploying a web application on Amazon EC2 instances. The company wants to follow best practices for security and compliance when configuring the EC2 instances. Which solution will meet th

The correct answer is D. Use AWS Systems Manager State Manager to manage the configuration of the EC2 instances.. AWS Systems Manager State Manager automates the process of keeping EC2 instance configurations in a defined, compliant state, which aligns with security and compliance best AWS CodePipeline is for automating code deployment, not for ongoing configuration AWS Config helps evaluate

Submitted by brentm· Mar 6, 2026Security and Compliance

Question

A company is deploying a web application on Amazon EC2 instances. The company wants to follow best practices for security and compliance when configuring the EC2 instances. Which solution will meet these requirements?

Options

  • AUse AWS Code Pipeline to deploy the application code and to configure the EC2 instances.
  • BUse AWS Config to evaluate the configuration of the EC2 instances.
  • CUse Amazon Lightsail to create and update the configuration of the EC2 instances.
  • DUse AWS Systems Manager State Manager to manage the configuration of the EC2 instances.

How the community answered

(41 responses)
  • A
    2% (1)
  • B
    2% (1)
  • D
    95% (39)

Explanation

AWS Systems Manager State Manager automates the process of keeping EC2 instance configurations in a defined, compliant state, which aligns with security and compliance best AWS CodePipeline is for automating code deployment, not for ongoing configuration AWS Config helps evaluate and audit resource configurations but does not actively manage or enforce configuration. Amazon Lightsail is a simplified cloud platform and not designed for managing EC2 instance configuration in enterprise environments.

Community Discussion

No community discussion yet for this question.

Full CLF-C02 Practice