You Are Responsible for Several EC2 Instances Deployed from Amazon

question 212

Multiple Choice

You are responsible for several EC2 instances deployed from Amazon AMIs that are required to upload information to an S3 bucket. This information must not traverse the public internet. You must also be able to update the instances. Which option is your best solution?

• A) An S3 endpoint and a NAT
• B) An S3 endpoint
• C) A VPN to the IP addresses specified in the AWS official S3 prefix list
• D) A NACL with the AWS prefix list added to it and a VPN.

---

Definitions:

Internal Control

Strategies and systems put in place by an organization to maintain the reliability of its financial and accounting data, encourage responsible behavior, and deter deceitful practices.

Invoice Approval

The process of reviewing and verifying invoices from suppliers before payment is made, to ensure that the charges are correct and services or goods were received.

Bonded

Refers to a business or individual that has purchased a surety bond, a type of insurance policy that protects against losses caused by the bonded party.

Insurance Policy

A contract between an insurer and a policyholder that specifies the terms of the insurance coverage.