DOP-C02 · Question #77
To run an application, a DevOps engineer launches an Amazon EC2 instance with public IP addresses in a public subnet. A user data script obtains the application artifacts and installs them on the inst
Sign in or unlock DOP-C02 to reveal the answer and full explanation for question #77. The question stem and answer options stay visible for context.
Question
To run an application, a DevOps engineer launches an Amazon EC2 instance with public IP addresses in a public subnet. A user data script obtains the application artifacts and installs them on the instances upon launch. A change to the security classification of the application now requires the instances to run with no access to the internet. While the instances launch successfully and show as healthy, the application does not seem to be installed. Which of the following should successfully install the application while complying with the new rule?
Options
- ALaunch the instances in a public subnet with Elastic IP addresses attached. Once the application
- BSet up a NAT gateway. Deploy the EC2 instances to a private subnet. Update the private subnet's
- CPublish the application artifacts to an Amazon S3 bucket and create a VPC endpoint for S3.
- DCreate a security group for the application instances and allow only outbound traffic to the artifact
Unlock DOP-C02 to see the answer
You've previewed enough free DOP-C02 questions. Unlock DOP-C02 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.