nerdexam
Amazon

SCS-C02 · Question #62

While securing the connection between a company's VPC and its on-premises data center, a security engineer sent a ping command from an on-premises host (IP address 203.0.113.12) to an Amazon EC2 insta

Sign in or unlock SCS-C02 to reveal the answer and full explanation for question #62. The question stem and answer options stay visible for context.

Submitted by joshua94· Mar 6, 2026Infrastructure Security

Question

While securing the connection between a company's VPC and its on-premises data center, a security engineer sent a ping command from an on-premises host (IP address 203.0.113.12) to an Amazon EC2 instance (IP address 172.31.16.139). The ping command did not return a response. The flow log in the VPC showed the following:

What action should be performed to allow the ping to work?

Exhibit

SCS-C02 question #62 exhibit

Options

  • AIn the security group of the EC2 instance, allow inbound ICMP traffic.
  • BIn the security group of the EC2 instance, allow outbound ICMP traffic.
  • CIn the VPC's NACL, allow inbound ICMP traffic.
  • DIn the VPC's NACL, allow outbound ICMP traffic.

Unlock SCS-C02 to see the answer

You've previewed enough free SCS-C02 questions. Unlock SCS-C02 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.

Topics

#VPC flow logs#NACL configuration#ICMP traffic#network troubleshooting
Full SCS-C02 Practice