nerdexam
AmazonAmazon

SCS-C02 · Question #210

SCS-C02 Question #210: Real Exam Question with Answer & Explanation

Sign in or unlock SCS-C02 to reveal the answer and full explanation for question #210. The question stem and answer options stay visible for context.

Submitted by khalil_dz· Mar 6, 2026

Question

A company deployed an Amazon EC2 instance to a VPC on AWS. A recent alert indicates that the EC2 instance is receiving a suspicious number of requests over an open TCP port from an external source. The TCP port remains open for long periods of time. The company's security team needs to stop all activity to this port from the external source to ensure that the EC2 instance is not being compromised. The application must remain available to other users. Which solution will mefet these requirements?

Options

  • AUpdate the network ACL that is attached to the subnet that is associated with the EC2 instance.
  • BUpdate the elastic network interface security group that is attached to the EC2 instance to remove
  • CUpdate the elastic network interface security group that is attached to the EC2 instance by adding
  • DCreate a new network ACL for the subnet. Deny all traffic from the EC2 instance to prevent data

Unlock SCS-C02 to see the answer

You've previewed enough free SCS-C02 questions. Unlock SCS-C02 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.

Full SCS-C02 PracticeBrowse All SCS-C02 Questions