SAP-C02 · Question #786
A company has an application that runs on a fleet of Amazon EC2 instances behind an Application Load Balancer (ALB). The application is in an AWS account that has AWS CloudTrail enabled. The company r
Sign in or unlock SAP-C02 to reveal the answer and full explanation for question #786. The question stem and answer options stay visible for context.
Question
A company has an application that runs on a fleet of Amazon EC2 instances behind an Application Load Balancer (ALB). The application is in an AWS account that has AWS CloudTrail enabled. The company restricts access to the application by adding the IP addresses of end users to a security group that is associated with the ALB. The company is developing an AWS Lambda function to determine if the allowed IP addresses have accessed the application recently. If an allowed IP address has not accessed the application in the last 90 days, the Lambda function will remove the IP address from the security group. The company needs to implement the functionality for the Lambda function to check the IPaddresses. Which combination of steps will provide this functionality MOST cost-effectively? ((Choose two.)
Options
- AFor the VPC that contains the ALB, configure VPC flow logs to be sent to a log group in Amazon
- BEnable access logging on the ALB. Create an Amazon Athena table to query the ALB access
- CProgram the Lambda function to check when each allowed IP address from the security group
- DProgram the Lambda function to check when each allowed IP address from the security group
- EProgram the Lambda function to check when each allowed IP address from the security group
Unlock SAP-C02 to see the answer
You've previewed enough free SAP-C02 questions. Unlock SAP-C02 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.