SOA-C02 · Question #291
A team of on-call engineers frequently needs to connect to Amazon EC2 instances in a private subnet to troubleshoot and run commands. The instances use either the latest AWS-provided Windows Amazon Ma
Sign in or unlock SOA-C02 to reveal the answer and full explanation for question #291. The question stem and answer options stay visible for context.
Question
A team of on-call engineers frequently needs to connect to Amazon EC2 instances in a private subnet to troubleshoot and run commands. The instances use either the latest AWS-provided Windows Amazon Machine Images (AMIs) or Amazon Linux AMIs. The team has an existing IAM role for authorization. A SysOps administrator must provide the team with access to the instances by granting IAM permissions to this role. Which solution will meet this requirement?
Options
- AAdd a statement to the IAM role policy to allow the ssm:StartSession action on the instances.
- BAssociate an Elastic IP address and a security group with each instance.
- CCreate a bastion host with an EC2 instance, and associate the bastion host with the VPC.
- DCreate an internet-facing Network Load Balancer.
Unlock SOA-C02 to see the answer
You've previewed enough free SOA-C02 questions. Unlock SOA-C02 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.