nerdexam
Amazon

SOA-C02 · Question #320

Application A runs on Amazon EC2 instances behind a Network Load Balancer (NLB). The EC2 instances are in an Auto Scaling group and are in the same subnet that is associated with the NLB. Other applic

Sign in or unlock SOA-C02 to reveal the answer and full explanation for question #320. The question stem and answer options stay visible for context.

Submitted by parkjh· Mar 30, 2026Networking and Content Delivery

Question

Application A runs on Amazon EC2 instances behind a Network Load Balancer (NLB). The EC2 instances are in an Auto Scaling group and are in the same subnet that is associated with the NLB. Other applications from an on-premises environment cannot communicate with Application A on port 8080. To troubleshoot the issue, a SysOps administrator analyzes the flow logs. The flow logs include the following records:

What is the reason for the rejected traffic?

Options

  • AThe security group of the EC2 instances has no Allow rule for the traffic from the NLB.
  • BThe security group of the NLB has no Allow rule for the traffic from the on-premises
  • CThe ACL of the on-premises environment does not allow traffic to the AWS environment.
  • DThe network ACL that is associated with the subnet does not allow outbound traffic for the

Unlock SOA-C02 to see the answer

You've previewed enough free SOA-C02 questions. Unlock SOA-C02 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.

Topics

#network ACL#NLB flow logs#outbound traffic rules#VPC troubleshooting
Full SOA-C02 Practice