SOA-C02 · Question #365
A company hosts its website on Amazon EC2 instances in the us-east-1 Region. The company is preparing to extend its website into the eu-central-1 Region, but the database must remain only in…
The correct answer is A. Create a VPC peering connection between the two Regions. Add the private IP address range of. VPN options are out of the question. We are left with add the IP address or a security group rule, but since you cannont create a security group rule that references a peer VPC security group, than the answer is clearly A…
Question
A company hosts its website on Amazon EC2 instances in the us-east-1 Region. The company is preparing to extend its website into the eu-central-1 Region, but the database must remain only in us-east-1. After deployment, the EC2 instances in eu-central-1 are unable to connect to the database in us-east-1. What is the MOST operationally efficient solution that will resolve this connectivity issue?
Options
- ACreate a VPC peering connection between the two Regions. Add the private IP address range of
- BCreate a VPC peering connection between the two Regions. Add the security group of the
- CCreate a VPN connection between the two Regions. Add the private IP address range of the
- DCreate a VPN connection between the two Regions. Add the security group of the instances in
How the community answered
(27 responses)- A78% (21)
- B4% (1)
- C7% (2)
- D11% (3)
Explanation
VPN options are out of the question. We are left with add the IP address or a security group rule, but since you cannont create a security group rule that references a peer VPC security group, than the answer is clearly A. https://docs.aws.amazon.com/vpc/latest/peering/vpc-peering-security-groups.html
Topics
Community Discussion
No community discussion yet for this question.