nerdexam
Amazon

DOP-C02 · Question #260

A company deploys an application on on-premises devices in the company's on-premises data center. The company uses an AWS Direct Connect connection between the data center and the company's AWS…

The correct answer is B. Generate certificates for each on-premises device in AWS Private Certificate Authority. Create a D. Use the amazon-efs-utils package to mount the EFS file system. https://aws.amazon.com/blogs/aws/amazon-efs-update-on-premises-access-via-direct-connect-

Submitted by joshua94· Mar 6, 2026Security and Compliance

Question

A company deploys an application on on-premises devices in the company's on-premises data center. The company uses an AWS Direct Connect connection between the data center and the company's AWS account. During initial setup of the on-premises devices and during application updates, the application needs to retrieve configuration files from an Amazon Elastic File System (Amazon EFS) file system. All traffic from the on-premises devices to Amazon EFS must remain private and encrypted. The on-premises devices must follow the principle of least privilege for AWS access. The company's DevOps team needs the ability to revoke access from a single device without affecting the access of the other devices. Which combination of steps will meet these requirements? (Choose two.)

Options

  • ACreate an IAM user that has an access key and a secret key for each device. Attach the
  • BGenerate certificates for each on-premises device in AWS Private Certificate Authority. Create a
  • CCreate an IAM user that has an access key and a secret key for all devices. Attach the
  • DUse the amazon-efs-utils package to mount the EFS file system.
  • EUse the native Linux NFS client to mount the EFS file system.

How the community answered

(21 responses)
  • A
    14% (3)
  • B
    48% (10)
  • C
    29% (6)
  • E
    10% (2)

Explanation

https://aws.amazon.com/blogs/aws/amazon-efs-update-on-premises-access-via-direct-connect-

Topics

#Hybrid connectivity#EFS on-premises access#PrivateLink for EFS#Certificate authentication

Community Discussion

No community discussion yet for this question.

Full DOP-C02 Practice