Examkin

Soru

Zorluk: OrtaAWS Network Services

A company wants to connect their on-premises office to a single Amazon VPC so that developers can access private resources. The connection must encrypt traffic over the public internet and be established quickly. Additionally, the company needs to apply a layer of network security that filters inbound and outbound traffic at the subnet level.

Which two AWS services or features should the company configure to meet these requirements? (Select TWO)

  1. AWS Site-to-Site VPNCevap
  2. Network ACLsCevap
  3. C
    Security Groups
  4. D
    Transit Gateway
  5. E
    VPC Peering connections

Cevap

AWS Site-to-Site VPN and Network ACLs
AWS Site-to-Site VPN provides a quick-to-establish, encrypted connection over the public internet between the on-premises office and the VPC. Network ACLs operate at the subnet boundary to filter both inbound and outbound traffic, satisfying the subnet-level security requirement.

Adım Adım Çözüm

1
Identify the hybrid connectivity requirement.
The requirement specifies a secure, encrypted connection over the public internet that can be established quickly between the on-premises office and the VPC. AWS Site-to-Site VPN fits this because it uses IPsec over the internet and can be set up rapidly compared to physical lines like AWS Direct Connect.
This determines the correct connectivity service.
2
Identify the network security requirement.
The security requirement specifies filtering inbound and outbound traffic at the subnet boundary. Network ACLs operate at the subnet level to filter traffic, whereas Security Groups operate at the instance level.
This determines the correct security filtering component.

Anahtar Kavram

AWS hybrid connectivity and VPC network security boundaries.
Tahmini Süre:1m 30s
Bu soruyu puanla

Konular

AWS Network Services

Bu konudan daha fazla soru