SOA-C02 · Question #320
Application A runs on Amazon EC2 instances behind a Network Load Balancer (NLB). The EC2 instances are in an Auto Scaling group and are in the same subnet that is associated with the NLB. Other…
The correct answer is D. The network ACL that is associated with the subnet does not allow outbound traffic for the. The network ACL that is associated with the subnet does not allow outbound traffic for the ephemeral port range. https://docs.aws.amazon.com/vpc/latest/userguide/flow-logs-records-examples.html
Question
Application A runs on Amazon EC2 instances behind a Network Load Balancer (NLB). The EC2 instances are in an Auto Scaling group and are in the same subnet that is associated with the NLB. Other applications from an on-premises environment cannot communicate with Application A on port 8080. To troubleshoot the issue, a SysOps administrator analyzes the flow logs. The flow logs include the following records:
What is the reason for the rejected traffic?
Options
- AThe security group of the EC2 instances has no Allow rule for the traffic from the NLB.
- BThe security group of the NLB has no Allow rule for the traffic from the on-premises
- CThe ACL of the on-premises environment does not allow traffic to the AWS environment.
- DThe network ACL that is associated with the subnet does not allow outbound traffic for the
How the community answered
(31 responses)- A3% (1)
- B10% (3)
- C16% (5)
- D71% (22)
Explanation
The network ACL that is associated with the subnet does not allow outbound traffic for the ephemeral port range. https://docs.aws.amazon.com/vpc/latest/userguide/flow-logs-records-examples.html
Topics
Community Discussion
No community discussion yet for this question.