nerdexam
AmazonAmazon

SOA-C02 · Question #111

SOA-C02 Question #111: Real Exam Question with Answer & Explanation

Sign in or unlock SOA-C02 to reveal the answer and full explanation for question #111. The question stem and answer options stay visible for context.

Submitted by ravi_2018· Mar 30, 2026Security and Compliance

Question

A SysOps administrator receives an alert from Amazon GuardDuty about suspicious network activity on an Amazon FC2 instance. The GuardDuty finding lists a new external IP address as a traffic destination. The SysOps administrator does not recognize the external IP address. The SysOps administrator must block traffic to the external IP address that GuardDuty identified. Which solution will meet this requirement?

Options

  • ACreate a new security group to block traffic to the external IP address.
  • BUse VPC flow logs with Amazon Athena to block traffic to the external IP address
  • CCreate a network ACL.
  • DCreate a new security group to block traffic to the external IP address.

Unlock SOA-C02 to see the answer

You've previewed enough free SOA-C02 questions. Unlock SOA-C02 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.

Topics

#Network ACLs#Security Groups#Network Security#GuardDuty
Full SOA-C02 PracticeBrowse All SOA-C02 Questions