SCS-C02 · Question #406
You have an Amazon VPC that has a private subnet and a public subnet in which you have a NAT instance server. You have created a group of EC2 instances that configure themselves at startup by…
The correct answer is D. EC2 instances in our private subnet, no EIPs, route outgoing traffic via the NAT. The below diagram shows how the NAT instance works. To make EC2 instances very secure, they need to be in a private sub such as the database server shown below with no EIP and all traffic routed via the NAT. Options A and B are invalid because the instances need to be in the…
Question
You have an Amazon VPC that has a private subnet and a public subnet in which you have a NAT instance server. You have created a group of EC2 instances that configure themselves at startup by downloading a bootstrapping script from S3 that deploys an application via GIT. Which one of the following setups would give us the highest level of security? Choose the correct answer from the options given below.
Exhibit
Options
- AEC2 instances in our public subnet, no EIPs, route outgoing traffic via the IGW
- BEC2 instances in our public subnet, assigned EIPs, and route outgoing traffic via the NAT
- CEC2 instance in our private subnet, assigned EIPs, and route our outgoing traffic via our IGW
- DEC2 instances in our private subnet, no EIPs, route outgoing traffic via the NAT
How the community answered
(50 responses)- A2% (1)
- B10% (5)
- C4% (2)
- D84% (42)
Explanation
The below diagram shows how the NAT instance works. To make EC2 instances very secure, they need to be in a private sub such as the database server shown below with no EIP and all traffic routed via the NAT. Options A and B are invalid because the instances need to be in the private subnet Option C is invalid because since the instance needs to be in the private subnet, you should not attach an EIP to the instance.
Topics
Community Discussion
No community discussion yet for this question.