An application is running on multiple EC2 instances. As part of an initiative to improve overall infrastructure security, the EC2 instances were moved to a private subnet. However, since moving, the EC2 instances have not been able to automatically update, and a SysOps Administrator has not been able to SSH into them remotely.
Which two actions could the Administrator take to securely resolve these issues? (Choose two.)

A. Set up a bastion host in a public subnet, and configure security groups and route tables accordingly. B. Set up a bastion host in the private subnet, and configure security groups accordingly. C. Configure a load balancer in a public subnet, and configure the route tables accordingly. D. Set up a NAT gateway in a public subnet, and change the private subnet route tables accordingly. E. Set up a NAT gateway in a private subnet, and ensure that the route tables are configured accordingly. Correct Answer: AD This question is in SOA-C01 AWS Certified SysOps Administrator – Associate Exam For getting AWS Certified SysOps Administrator – Associate Certificate

Disclaimers:
The website is not related to, affiliated with, endorsed or authorized by Amazon.
Trademarks, certification & product names are used for reference only and belong to Amazon.
The website does not contain actual questions and answers from Amazon's Certification Exam.