SAP-C02 · Question #178
A company wants to migrate its website from an on-premises data center onto AWS. At the same time, it wants to migrate the website to a containerized microservice-based architecture to improve the…
The correct answer is B. Create tasks using the awsvpc network mode. E. Apply security groups to the tasks, and use IAM roles for tasks to access other resources. https://aws.amazon.com/about-aws/whats-new/2017/11/amazon-ecs-introduces-awsvpc- networking-mode-for-containers-to-support-full-networking-capabilities/
Question
A company wants to migrate its website from an on-premises data center onto AWS. At the same time, it wants to migrate the website to a containerized microservice-based architecture to improve the availability and cost efficiency. The company's security policy states that privileges and network permissions must be configured according to best practice, using least privilege. A Solutions Architect must create a containerized architecture that meets the security requirements and has deployed the application to an Amazon ECS cluster. What steps are required after the deployment to meet the requirements? (Choose two.)
Options
- ACreate tasks using the bridge network mode.
- BCreate tasks using the awsvpc network mode.
- CApply security groups to Amazon EC2 instances, and use IAM roles for EC2 instances to access
- DApply security groups to the tasks, and pass IAM credentials into the container at launch time to
- EApply security groups to the tasks, and use IAM roles for tasks to access other resources.
How the community answered
(32 responses)- A3% (1)
- B69% (22)
- C6% (2)
- D22% (7)
Explanation
https://aws.amazon.com/about-aws/whats-new/2017/11/amazon-ecs-introduces-awsvpc- networking-mode-for-containers-to-support-full-networking-capabilities/
Community Discussion
No community discussion yet for this question.