Examkin

Question

Difficulty: MediumAWS Network Services

A company wants to connect their on-premises office to a single Amazon VPC so that developers can access private resources. The connection must encrypt traffic over the public internet and be established quickly. Additionally, the company needs to apply a layer of network security that filters inbound and outbound traffic at the subnet level.

Which two AWS services or features should the company configure to meet these requirements? (Select TWO)

  1. AWS Site-to-Site VPNAnswer
  2. Network ACLsAnswer
  3. C
    Security Groups
  4. D
    Transit Gateway
  5. E
    VPC Peering connections

Answer

AWS Site-to-Site VPN and Network ACLs
AWS Site-to-Site VPN provides a quick-to-establish, encrypted connection over the public internet between the on-premises office and the VPC. Network ACLs operate at the subnet boundary to filter both inbound and outbound traffic, satisfying the subnet-level security requirement.

Step-by-Step Solution

1
Identify the hybrid connectivity requirement.
The requirement specifies a secure, encrypted connection over the public internet that can be established quickly between the on-premises office and the VPC. AWS Site-to-Site VPN fits this because it uses IPsec over the internet and can be set up rapidly compared to physical lines like AWS Direct Connect.
This determines the correct connectivity service.
2
Identify the network security requirement.
The security requirement specifies filtering inbound and outbound traffic at the subnet boundary. Network ACLs operate at the subnet level to filter traffic, whereas Security Groups operate at the instance level.
This determines the correct security filtering component.

Key Concept

AWS hybrid connectivity and VPC network security boundaries.
Estimated Time:1m 30s
Rate this question

Topics

AWS Network Services

More questions from this topic