DOP-C02 · Question #260
A company deploys an application on on-premises devices in the company's on-premises data center. The company uses an AWS Direct Connect connection between the data center and the company's AWS…
The correct answer is B. Generate certificates for each on-premises device in AWS Private Certificate Authority. Create a D. Use the amazon-efs-utils package to mount the EFS file system. https://aws.amazon.com/blogs/aws/amazon-efs-update-on-premises-access-via-direct-connect-
Question
A company deploys an application on on-premises devices in the company's on-premises data center. The company uses an AWS Direct Connect connection between the data center and the company's AWS account. During initial setup of the on-premises devices and during application updates, the application needs to retrieve configuration files from an Amazon Elastic File System (Amazon EFS) file system. All traffic from the on-premises devices to Amazon EFS must remain private and encrypted. The on-premises devices must follow the principle of least privilege for AWS access. The company's DevOps team needs the ability to revoke access from a single device without affecting the access of the other devices. Which combination of steps will meet these requirements? (Choose two.)
Options
- ACreate an IAM user that has an access key and a secret key for each device. Attach the
- BGenerate certificates for each on-premises device in AWS Private Certificate Authority. Create a
- CCreate an IAM user that has an access key and a secret key for all devices. Attach the
- DUse the amazon-efs-utils package to mount the EFS file system.
- EUse the native Linux NFS client to mount the EFS file system.
How the community answered
(21 responses)- A14% (3)
- B48% (10)
- C29% (6)
- E10% (2)
Explanation
https://aws.amazon.com/blogs/aws/amazon-efs-update-on-premises-access-via-direct-connect-
Topics
Community Discussion
No community discussion yet for this question.