An Application Is Currently Secured Using Network Access Control Lists

question 60

Multiple Choice

An application is currently secured using network access control lists and security groups. Web servers are located in public subnets behind an Application Load Balancer (ALB) ; application servers are located in private subnets. How can edge security be enhanced to safeguard the Amazon EC2 instances against attack? (Choose two.)

• A) Configure the application's EC2 instances to use NAT gateways for all inbound traffic.
• B) Move the web servers to private subnets without public IP addresses.
• C) Configure AWS WAF to provide DDoS attack protection for the ALB.
• D) Require all inbound network traffic to route through a bastion host in the private subnet.
• E) Require all inbound and outbound network traffic to route through an AWS Direct Connect connection.

---

Definitions:

Consumer Interaction

The engagement process between a business and its customers, which can encompass various forms of communication and feedback channels.

Periscope Videos

Live video broadcasts that were previously made through a mobile app called Periscope, now integrated into Twitter.

Facebook Live Videos

A feature on Facebook that allows users to broadcast real-time video to their followers and engage with them directly.

Expire 24 Hours

Usually relates to digital content that is designed to be accessible or visible for only twenty-four hours before it disappears or becomes unavailable.