SAP-C02 · Question #783
SAP-C02 Question #783: Real Exam Question with Answer & Explanation
Sign in or unlock SAP-C02 to reveal the answer and full explanation for question #783. The question stem and answer options stay visible for context.
Question
A company is changing the way that it handles patching of Amazon EC2 instances in its application account. The company currently patches instances over the internet by using a NAT gateway in a VPC in the application account. The company has EC2 instances set up as a patch source repository in a dedicated private VPC in a core account. The company wants to use AWS Systems Manager Patch Manager and the patch source repository in the core account to patch the EC2 instances in the application account. The company must prevent all EC2 instances in the application account from accessing the internet. The EC2 instances in the application account need to access Amazon S3, where the application data is stored. These EC2 instances need connectivity to Systems Manager and to the patch source repository in the private VPC in the core account. Which solution will meet these requirements?
Options
- ACreate a network ACL that blocks outbound traffic on port 80. Associate the network ACL with all
- BCreate private VIFs for Systems Manager and Amazon S3. Delete the NAT gateway from the
- CCreate VPC endpoints for Systems Manager and Amazon S3. Delete the NAT gateway from the
- DCreate a network ACL that blocks inbound traffic on port 80. Associate the network ACL with all
Unlock SAP-C02 to see the answer
You've previewed enough free SAP-C02 questions. Unlock SAP-C02 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.