A company runs a web application that is deployed on Amazon EC2 instances in the private subnet of a VP

A. An Application Load Balancer (ALB) that extends across the public subnets directs web traffic to the EC2 instances. The company wants to implement new security measures to restrict inbound traffic from the ALB to the EC2 instances while preventing access from any other source inside or outside the private subnet of the EC2 instances.
Which solution will meet these requirements?

B. configure a route in a route table to direct traffic from the internet to the private IP addresses of the EC2 instances.

C. configure the security group for the EC2 instances to only allow traffic that comes from the security group for the AL

D. Move the EC2 instances into the public subnet. Give the EC2 instances a set of Elastic IP addresses.

E. configure the security group for the ALB to allow any TCP traffic on any port.






 

Correct Answer: B

This question is in SAA-C03 exam
For getting AWS Certified Solutions Architect Associate Certificate

Disclaimers:
The website is not related to, affiliated with, endorsed or authorized by Amazon.
Trademarks, certification & product names are used for reference only and belong to Amazon.
The website does not contain actual questions and answers from Amazon's Certification Exams.