nerdexam
Amazon

SCS-C03 · Question #128

A company has a large fleet of Amazon Linux 2 Amazon EC2 instances that run an application. The application processes sensitive data and has the following compliance requirements: - No remote access m

Sign in or unlock SCS-C03 to reveal the answer and full explanation for question #128. The question stem and answer options stay visible for context.

Submitted by thandi_sa· Mar 6, 2026Infrastructure Security

Question

A company has a large fleet of Amazon Linux 2 Amazon EC2 instances that run an application. The application processes sensitive data and has the following compliance requirements:

  • No remote access management ports to the EC2 instances can be exposed

internally or externally.

  • All remote session activity must be recorded in an audit log.
  • All remote access to the EC2 instances must be authenticated and

authorized by AWS IAM Identity Center. The company's DevOps team occasionally needs to connect to one of the EC2 instances to troubleshoot issues. Which solution will provide remote access to the EC2 instances while meeting the compliance requirements?

Options

  • AGrant access to the EC2 serial console at the account level.
  • BEnable EC2 Instance Connect and configure security group rules.
  • CAssign an EC2 instance role that allows access to AWS Systems Manager. Create an IAM policy
  • DUse AWS Systems Manager Automation runbooks to open remote access ports.

Unlock SCS-C03 to see the answer

You've previewed enough free SCS-C03 questions. Unlock SCS-C03 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.

Topics

#Systems Manager Session Manager#IAM Identity Center#remote access#session recording
Full SCS-C03 Practice