An engineer must create a new VPC and deploy several Amazon EC2 instances in AWS. Only SSH connections originating from IP address 20.20.20.20 must be allowed to reach the EC2 instances. What must…

The correct answer is B. Security group. AWS Security Groups act as the primary stateful firewalls for EC2 instances. To restrict SSH (TCP/22) to a single host (20.20.20.20/32), a Security Group must be configured with: Inbound rule: TCP 22 Source: 20.20.20.20/32 ACLs operate at the subnet level but are not used for…

Cloud Infrastructure Design

Question

An engineer must create a new VPC and deploy several Amazon EC2 instances in AWS. Only SSH connections originating from IP address 20.20.20.20 must be allowed to reach the EC2 instances. What must be configured?

Options

AAccess control list
BSecurity group
CWeb application firewall
DResource group

How the community answered

(61 responses)

A
5% (3)
B
82% (50)
C
10% (6)
D
3% (2)

Explanation

AWS Security Groups act as the primary stateful firewalls for EC2 instances. To restrict SSH (TCP/22) to a single host (20.20.20.20/32), a Security Group must be configured with: Inbound rule: TCP 22 Source: 20.20.20.20/32 ACLs operate at the subnet level but are not used for instance-specific SSH restrictions. WAF controls HTTP/HTTPS traffic, not SSH. Resource groups only organize cloud assets.

Topics

#AWS security groups#VPC#SSH access control#cloud security

Community Discussion

No community discussion yet for this question.

Full 300-540 Practice