ANS-C01 · Question #69
Your security team implements a host-based firewall on all of your Amazon Elastic Compute Cloud (EC2) instances to block all outgoing traffic. Exceptions must be requested for each specific…
The correct answer is C. Outbound; Protocol tcp; Destination 169.254.169.254; Destination port 80. https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/instancedata-data-retrieval.html To view all categories of instance metadata from within a running instance, use the following URI.
Question
Your security team implements a host-based firewall on all of your Amazon Elastic Compute Cloud (EC2) instances to block all outgoing traffic. Exceptions must be requested for each specific requirement. Until you request a new rule, you cannot access the instance metadata service. Which firewall rule should you request to be added to your instances to allow instance metadata access?
Options
- AInbound; Protocol tcp; Source [Instance's EIP]; Destination 169.254.169.254
- BInbound; Protocol tcp; Destination 169.254.169.254; Destination port 80
- COutbound; Protocol tcp; Destination 169.254.169.254; Destination port 80
- DOutbound; Protocol tcp; Destination 169.254.169.254; Destination port 443
How the community answered
(51 responses)- A6% (3)
- B14% (7)
- C76% (39)
- D4% (2)
Explanation
https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/instancedata-data-retrieval.html To view all categories of instance metadata from within a running instance, use the following URI.
Topics
Community Discussion
No community discussion yet for this question.