Amazon Exam AWS-Solution-Architect-Associate Topic 1 Question 2 Discussion

Actual exam question for Amazon's AWS-Solution-Architect-Associate exam

Question #: 2
Topic #: 1

[All AWS-Solution-Architect-Associate Questions]

A Solutions Architect is designing an application that will run on Amazon ECS behind an Application Load Balancer (ALB). For security reasons, the Amazon EC2 host instances for the ECS cluster are in a private subnet.

What should be done to ensure that the incoming traffic to the host instances is from the ALB only?

ACreate network ACL rules for the private subnet to allow incoming traffic on ports 32768 through 61000 from the IP address of the ALB only.

BUpdate the ECS cluster security group to allow incoming access from the IP address of the ALB only.

CModify the security group used by the ECS cluster to allow incoming traffic from the security group used by the ALB only.

DEnable AWS WAF on the ALB and enable the ECS rule.

Show Suggested Answer

Suggested Answer: B

by Jovita at Jul 30, 2022, 04:44 PM

Limited Time Offer

25%

Off

Get Premium AWS-Solution-Architect-Associate Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Currently there are no comments in this discussion, be the first to comment!