SCS-C03 · Question #6
A company is attempting to conduct forensic analysis on an Amazon EC2 instance, but the company is unable to connect to the instance by using AWS Systems Manager Session Manager. The company has insta
Sign in or unlock SCS-C03 to reveal the answer and full explanation for question #6. The question stem and answer options stay visible for context.
Question
A company is attempting to conduct forensic analysis on an Amazon EC2 instance, but the company is unable to connect to the instance by using AWS Systems Manager Session Manager. The company has installed AWS Systems Manager Agent (SSM Agent) on the EC2 instance. The EC2 instance is in a subnet in a VPC that does not have an internet gateway attached. The company has associated a security group with the EC2 instance. The security group does not have inbound or outbound rules. The subnet's network ACL allows all inbound and outbound traffic. Which combination of actions will allow the company to conduct forensic analysis on the EC2 instance without compromising forensic data? (Select THREE.)
Options
- AUpdate the EC2 instance security group to add a rule that allows outbound traffic on port 443 for
- BUpdate the EC2 instance security group to add a rule that allows inbound traffic on port 443 to the
- CCreate an EC2 key pair. Associate the key pair with the EC2 instance.
- DCreate a VPC interface endpoint for Systems Manager in the VPC where the EC2 instance is
- EAttach a security group to the VPC interface endpoint. Allow inbound traffic on port 443 to the
- FCreate a VPC interface endpoint for the EC2 instance in the VPC where the EC2 instance is
Unlock SCS-C03 to see the answer
You've previewed enough free SCS-C03 questions. Unlock SCS-C03 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.