SAP-C02 · Question #841
A company wants to improve the security posture for a group of Amazon EC2 instances. The EC2 instances run behind an Application Load Balancer (ALB) in a VPC. The EC2 instances have a route to the int
Sign in or unlock SAP-C02 to reveal the answer and full explanation for question #841. The question stem and answer options stay visible for context.
Question
A company wants to improve the security posture for a group of Amazon EC2 instances. The EC2 instances run behind an Application Load Balancer (ALB) in a VPC. The EC2 instances have a route to the internet. A solutions architect must ensure that the EC2 instances cannot open outbound SSH connections on any port to communicate with systems on the internet. Which solution will meet this requirement?
Options
- AIn the VPC, create an outbound network ACL rule that denies SSH over any port.
- BIn the VPC, create an outbound security group rule that denies SSH over any port.
- CCreate an AWS WAF web ACL that has a rule that blocks access to all IP addresses for SSH.
- DCreate a firewall in AWS Network Firewall. Create a stateful rule group that has a rule that denies
Unlock SAP-C02 to see the answer
You've previewed enough free SAP-C02 questions. Unlock SAP-C02 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.