SAA-C03 · Question #631
A company recently launched Linux-based application instances on Amazon EC2 in a private subnet and launched a Linux-based bastion host on an Amazon EC2 instance in a public subnet of a VPC. A…
The correct answer is C. Replace the current security group of the bastion host with one that only allows inbound access D. Replace the current security group of the application instances with one that allows inbound SSH. C because from on-prem network to bastion through internet (using on-prem resource's public D because bastion and ec2 is in same VPC, meaning bastion can communicate to EC2 via it's private IP address.
Question
A company recently launched Linux-based application instances on Amazon EC2 in a private subnet and launched a Linux-based bastion host on an Amazon EC2 instance in a public subnet of a VPC. A solutions architect needs to connect from the on-premises network, through the company's internet connection, to the bastion host, and to the application servers. The solutions architect must make sure that the security groups of all the EC2 instances will allow that access. Which combination of steps should the solutions architect take to meet these requirements? (Choose two.)
Options
- AReplace the current security group of the bastion host with one that only allows inbound access
- BReplace the current security group of the bastion host with one that only allows inbound access
- CReplace the current security group of the bastion host with one that only allows inbound access
- DReplace the current security group of the application instances with one that allows inbound SSH
- EReplace the current security group of the application instances with one that allows inbound SSH
How the community answered
(46 responses)- A4% (2)
- B15% (7)
- C76% (35)
- E4% (2)
Explanation
C because from on-prem network to bastion through internet (using on-prem resource's public D because bastion and ec2 is in same VPC, meaning bastion can communicate to EC2 via it's private IP address.
Community Discussion
No community discussion yet for this question.