AWS Certified Security – Specialty (SCS-C02) — Question 121

A company has a large fleet of Linux Amazon EC2 instances and Windows EC2 instances that run in private subnets. The company wants all remote administration to be performed as securely as possible in the AWS Cloud.

Which solution will meet these requirements?

Answer options

• A. Do not use SSH-RSA private keys during the launch of new instances Implement AWS Systems Manager Session Manager
• B. Generate new SSH-RSA private keys for existing instances Implement AWS Systems Manager Session Manager
• C. Do not use SSH-RSA private keys during the launch of new instances Configure EC2 Instance Connect
• D. Generate new SSH-RSA private keys for existing instances Configure EC2 Instance Connect

Correct answer: A

Explanation

Option A is correct because using AWS Systems Manager Session Manager allows for secure remote administration without the need for SSH-RSA keys, enhancing security. The other options either suggest generating new keys, which does not address the security concern as effectively, or use EC2 Instance Connect, which is not as secure as the Session Manager for this context.