DOP-C02 · Question #259
A DevOps engineer is building the infrastructure for an application. The application needs to run on an Amazon Elastic Kubernetes Service (Amazon EKS) cluster that includes Amazon EC2 instances. The…
The correct answer is B. Add an inbound rule to the EFS file system's security group to allow NFS traffic from the EKS C. Create an IAM role that allows the Amazon EFS CSI driver to interact with the file system E. Create a mount target for the EFS file system in the subnet of the EKS nodes. Mounting EFS to EC2-backed EKS nodes requires: NFS (port 2049) open from nodes to EFS (Security Group rule). Mount targets in each subnet/AZ where nodes reside. IAM role for the EFS CSI driver with elasticfilesystem:ClientMount and ClientRootAccess These are the standard setup…
Question
A DevOps engineer is building the infrastructure for an application. The application needs to run on an Amazon Elastic Kubernetes Service (Amazon EKS) cluster that includes Amazon EC2 instances. The EC2 instances need to use an Amazon Elastic File System (Amazon EFS) file system as a storage backend. The Amazon EFS Container Storage Interface (CSI) driver is installed on the EKS cluster. When the DevOps engineer starts the application, the EC2 instances do not mount the EFS file system. Which solutions will fix the problem? (Choose three.)
Options
- ASwitch the EKS nodes from Amazon EC2 to AWS Fargate.
- BAdd an inbound rule to the EFS file system's security group to allow NFS traffic from the EKS
- CCreate an IAM role that allows the Amazon EFS CSI driver to interact with the file system
- DSet up AWS DataSync to configure file transfer between the EFS file system and the EKS nodes.
- ECreate a mount target for the EFS file system in the subnet of the EKS nodes.
- FDisable encryption or the EFS file system.
How the community answered
(49 responses)- A4% (2)
- B84% (41)
- D10% (5)
- F2% (1)
Explanation
Mounting EFS to EC2-backed EKS nodes requires: NFS (port 2049) open from nodes to EFS (Security Group rule). Mount targets in each subnet/AZ where nodes reside. IAM role for the EFS CSI driver with elasticfilesystem:ClientMount and ClientRootAccess These are the standard setup requirements in "Using the Amazon EFS CSI Driver with Amazon
Topics
Community Discussion
No community discussion yet for this question.