AWS Certified Solutions Architect Associate Test 10

Explanation:
A security group acts as a firewall that controls the traffic allowed to reach one or more instances.When you launch an instance, you assign it one or more security groups.
http://docs.amazonwebservices.com/AWSEC2/latest/UserGuide/UsingIAM.html