nerdexam
Amazon

SCS-C02 · Question #158

A company has a large fleet of Linux Amazon EC2 instances and Windows EC2 instances that run in private subnets. The company wants all remote administration to be performed as securely as possible…

The correct answer is A. Do not use SSH-RSA private keys during the launch of new instances Implement AWS Systems. Definitely not C or D because EC2 Instance Connect supports only linux instances https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/connect-linux-inst-eic.html Session Manager provides secure and auditable node management without the need to open inbound ports, maintain…

Submitted by omar99· Mar 6, 2026Infrastructure Security

Question

A company has a large fleet of Linux Amazon EC2 instances and Windows EC2 instances that run in private subnets. The company wants all remote administration to be performed as securely as possible in the AWS Cloud. Which solution will meet these requirements?

Options

  • ADo not use SSH-RSA private keys during the launch of new instances Implement AWS Systems
  • BGenerate new SSH-RSA private keys for existing instances Implement AWS Systems Manager
  • CDo not use SSH-RSA private keys during the launch of new instances Configure EC2 Instance
  • DGenerate new SSH-RSA private keys for existing instances Configure EC2 Instance Connect

How the community answered

(29 responses)
  • A
    76% (22)
  • B
    3% (1)
  • C
    14% (4)
  • D
    7% (2)

Explanation

Definitely not C or D because EC2 Instance Connect supports only linux instances https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/connect-linux-inst-eic.html Session Manager provides secure and auditable node management without the need to open inbound ports, maintain bastion hosts, or manage SSH keys. Session Manager provides support for Windows, Linux, and macOS from a single tool. https://docs.aws.amazon.com/systems-manager/latest/userguide/session-manager.html

Topics

#Systems Manager Session Manager#SSH key elimination#secure remote access#private subnet

Community Discussion

No community discussion yet for this question.

Full SCS-C02 Practice