A Company Has Two AWS Accounts, Each Containing One VPC

question 134

Multiple Choice

A company has two AWS accounts, each containing one VPC. The first VPC has a VPN connection with its corporate network. The second VPC, without a VPN, hosts an Amazon Aurora database cluster in private subnets. Developers manage the Aurora database from a bastion host in a public subnet as shown in the image. A security review has flagged this architecture as vulnerable, and a Security Engineer has been asked to make this design more secure. The company has a short deadline and a second VPN connection to the Aurora account is not possible. How can the Security Engineer securely set up the bastion host?

• A) Move the bastion host to the VPC with VPN connectivity. Create a VPC peering relationship between the bastion host VPC and Aurora VPC.
• B) Create an SSH port forwarding tunnel on the Developer's workstation to the bastion host to ensure that only authorized SSH clients can access the bastion host.
• C) Move the bastion host to the VPC with VPN connectivity. Create a cross-account trust relationship between the bastion VPC and Aurora VPC, and update the Aurora security group for the relationship.
• D) Create an AWS Direct Connect connection between the corporate network and the Aurora account, and adjust the Aurora security group for this connection.

---

Definitions:

Form 1040

The official form provided by the Internal Revenue Service (IRS) that people use to submit their yearly income tax returns.

Wage Bracket Method

A technique used by employers to determine the amount of federal income tax to withhold from employees' paychecks based on their earnings and filing status.

Withholding Allowances

Allowances claimed on employment forms determining the amount of federal income tax withheld from a paycheck.

Federal Withholding

The portion of an employee's wages that is withheld by the employer for the purpose of paying federal income taxes.