nerdexam
AmazonAmazon

SCS-C02 · Question #131

SCS-C02 Question #131: Real Exam Question with Answer & Explanation

Sign in or unlock SCS-C02 to reveal the answer and full explanation for question #131. The question stem and answer options stay visible for context.

Submitted by deeparc· Mar 6, 2026Infrastructure Security

Question

A company hosts a public website on an Amazon EC2 instance. HTTPS traffic must be able to access the website. The company uses SSH for management of the web server. The website is on the subnet 10.0.1.0/24. The management subnet is 192.168.100.0/24. A security engineer must create a security group for the EC2 instance. Which combination of steps should the security engineer take to meet these requirements in the MOST secure manner? (Choose two.)

Options

  • AAllow port 22 from source 0.0.0.0/0.
  • BAllow port 443 from source 0.0 0 0/0.
  • CAllow port 22 from 192.168.100.0/24.
  • DAllow port 22 from 10.0.1.0/24.
  • EAllow port 443 from 10.0.1.0/24.

Unlock SCS-C02 to see the answer

You've previewed enough free SCS-C02 questions. Unlock SCS-C02 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.

Topics

#Security Groups#Network Security#EC2 Security#Least Privilege
Full SCS-C02 PracticeBrowse All SCS-C02 Questions