Which of the following is NOT an effective method for enhancing the security of an ECS networking solution?

Question

Options

• AImplementing strict network ACLs and security group rules
• BUsing public IP addresses for all instances to ensure accessibility
• CEncrypting data in transit using TLS/SSL
• DSegregating networks using private and public subnets

• A
  13% (3)
• B
  75% (18)
• C
  8% (2)
• D
  4% (1)

Explanation

Using public IP addresses for all instances (B) actively undermines security by exposing every service directly to the internet, eliminating the defense-in-depth that private networking provides - it trades accessibility for a massive attack surface. Options A, C, and D are all genuine security controls: strict ACLs and security groups enforce least-privilege traffic rules at the network boundary; TLS/SSL encryption protects data from interception during transmission; and subnet segregation keeps sensitive backend services (databases, internal APIs) unreachable from the public internet while only exposing what needs to be public. A quick memory tip: think "accessibility ≠ security" - any option that prioritizes blanket public exposure over controlled access is the wrong answer on security questions, since legitimate accessibility needs are met through load balancers and API gateways, not by assigning public IPs to every instance.

No community discussion yet for this question.