A Company Wants to Deploy an Application in a Private

question 160

Multiple Choice

A company wants to deploy an application in a private VPC that will not be connected to the internet. The company's security team will not allow bastion hosts or methods using SSH to log in to Amazon EC2 instances. The application team plans to use AWS Systems Manager Session Manager to connect to and manage the EC2 instances. Which combination of steps should the security team take? (Choose three.)

• A) Make sure the Systems Manager Agent is installed and running on all EC2 instances inside the VPC.
• B) Ensure the IAM role attached to the EC2 instances in the VPC allows access to Systems Manager.
• C) Create an SCP that prevents the creation of SSH key pairs.
• D) Launch a NAT gateway in the VPC. Update the routing policies to forward traffic to this NAT gateway.
• E) Ensure proper VPC endpoints are in place for Systems Manager and Amazon EC2.
• F) Ensure the VPC has a transit gateway attachment. Update the routing policies to forward traffic to this transit gateway.

---

Definitions:

Parenchyma Cells

Fundamental plant tissue composed of thin-walled living cells that function in photosynthesis, storage, and as the tissue repair and regeneration mechanism.

Secondary Growth

Growth that results in an increase in girth or thickness of plants, particularly in woody plants.

Primary Xylem

The portion of the xylem that is formed during the primary growth of plants, responsible for the transport of water and nutrients from the roots.

Lateral Meristems

A type of plant tissue found in the stems and roots of plants, responsible for growth in diameter or thickness.