A Company Has an Amazon EC2 Instance Running on a Private

question 420

Multiple Choice

A company has an Amazon EC2 instance running on a private subnet that needs to access a public website to download patches and updates. The company does not want external websites to see the EC2 instance IP address or initiate connections to it. How can a solutions architect achieve this objective?

• A) Create a site-to-site VPN connection between the private subnet and the network in which the public site is deployed.
• B) Create a NAT gateway in a public subnet. Route outbound traffic from the private subnet through the NAT gateway.
• C) Create a network ACL for the private subnet where the EC2 instance deployed only allows access from the IP address range of the public website.
• D) Create a security group that only allows connections from the IP address range of the public website. Attach the security group to the EC2 instance.

---

Definitions:

HIV Cure

Currently, there is no complete cure for HIV/AIDS, but treatments can significantly manage the disease and improve quality of life.

Physical Barrier

Structures or obstacles that prevent movement or access, serving to protect or delineate boundaries.

Cervical Cap

A barrier contraceptive device worn over the cervix to prevent sperm from entering the uterus.

IUD

An intrauterine device, a form of long-term birth control placed inside the uterus to prevent pregnancy.