SAP-C02 Question #57: Real Exam Question with Answer & Explanation

Question

A company runs an e-commerce platform with front-end and e-commerce tiers. Both tiers run on LAMP stacks with the front-end instances running behind a load balancing appliance that has a virtual offering on AWS Current*/, the operations team uses SSH to log in to the instances to maintain patches and address other concerns. The platform has recently been the target of multiple attacks, including. - A DDoS attack. - An SOL injection attack - Several successful dictionary attacks on SSH accounts on the web servers The company wants to improve the security of the e-commerce platform by migrating to AWS. The company's solutions architects have decided to use the following approach: - Code review the existing application and fix any SQL injection issues. - Migrate the web application to AWS and leverage the latest AWS Linux AMI to address initial security patching. - Install AWS Systems Manager to manage patching and allow the system administrators to run commands on all instances, as needed. What additional steps will address all of the identified attack types while providing high availability and minimizing risk?

Options

• AEnable SSH access to the Amazon EC2 instances using a security group that limits access to
• BDisable SSH access to the Amazon EC2 instances. Migrate on-premises MySQL to Amazon RDS
• CEnable SSH access to the Amazon EC2 instances through a bastion host secured by limiting
• DDisable SSH access to the EC2 instances. Migrate on-premises MySQL to Amazon RDS Single-