Examtopics

AWS Certified SysOps Administrator - Associate
  • Topic 1 Question 456

    A company deploys a new application on three Amazon EC2 instances across three Availability Zones. The company uses a Network Load Balancer (NLB) to route traffic to the EC2 instances. A SysOps administrator must implement a solution so that the EC2 instances allow traffic from only the NLB.

    What should the SysOps administrator do to meet these requirements with the LEAST operational overhead?

    • Configure the security group that is associated with the EC2 instances to allow traffic from only the security group that is associated with the NLB

    • Configure the security group that is associated with the EC2 instances to allow traffic from only the elastic network interfaces that are associated with the NLB

    • Create a network ACL Associate the network ACL with the application subnets. Configure the network ACL to allow inbound traffic from only the CIDR ranges of the NLB

    • Use a third-party firewall solution that is installed on a separate EC2 instance. Configure a firewall rule that allows traffic to the application's EC2 instances from only the subnets where the NLB is deployed.


    シャッフルモード