AmazonAmazon
SCS-C02 · Question #121
SCS-C02 Question #121: Real Exam Question with Answer & Explanation
Sign in or unlock SCS-C02 to reveal the answer and full explanation for question #121. The question stem and answer options stay visible for context.
Submitted by certguy· Mar 6, 2026Infrastructure Security
Question
The security engineer is managing a traditional three-tier web application that is running on Amazon EC2 instances. The application has become the target of increasing numbers of malicious attacks from the internet. What steps should the security engineer take to check for known vulnerabilities and limit the attack surface? (Choose two.)
Options
- AUse AWS Certificate Manager to encrypt all traffic between the client and application servers.
- BReview the application security groups to ensure that only the necessary ports are open.
- CUse Elastic Load Balancing to offload Secure Sockets Layer encryption.
- DUse Amazon Inspector to periodically scan the backend instances.
- EUse AWS Key Management Service (AWS KMS) to encrypt all the traffic between the client and
Unlock SCS-C02 to see the answer
You've previewed enough free SCS-C02 questions. Unlock SCS-C02 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.
Topics
#Security Groups#Vulnerability Management#Amazon Inspector#Attack Surface Reduction