ANS-C01 · Question #118
A company has several production applications across different accounts in the AWS Cloud. The company operates from the us-east-1 Region only. Only certain partner companies can access the application
Sign in or unlock ANS-C01 to reveal the answer and full explanation for question #118. The question stem and answer options stay visible for context.
Question
A company has several production applications across different accounts in the AWS Cloud. The company operates from the us-east-1 Region only. Only certain partner companies can access the applications. The applications are running on Amazon EC2 instances that are in an Auto Scaling group behind an Application Load Balancer (ALB). The EC2 instances are in private subnets and allow traffic only from the ALB. The ALB is in a public subnet and allows inbound traffic only from partner network IP address ranges over port 80. When the company adds a new partner, the company must allow the IP address range of the partner network in the security group that is associated with the ALB in each account. A network engineer must implement a solution to centrally manage the partner network IP address ranges. Which solution will meet these requirements in the MOST operationally efficient manner?
Options
- ACreate an Amazon DynamoDB table to maintain all IP address ranges and security groups that
- BCreate a new prefix list. Add all allowed IP address ranges to the prefix list. Use Amazon
- CCreate a new prefix list. Add all allowed IP address ranges to the prefix list. Share the prefix list
- DCreate an Amazon S3 bucket to maintain all IP address ranges and security groups that need to
Unlock ANS-C01 to see the answer
You've previewed enough free ANS-C01 questions. Unlock ANS-C01 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.