You Are Designing a Data Leak Prevention Solution for Your

question 732

Multiple Choice

You are designing a data leak prevention solution for your VPC environment. You want your VPC Instances to be able to access software depots and distributions on the Internet for product updates. The depots and distributions are accessible via third party CDNs by their URLs. You want to explicitly deny any other outbound connections from your VPC instances to hosts on the internet. Which of the following options would you consider?

• A) Configure a web proxy server in your VPC and enforce URL-based rules for outbound access Remove default routes.
• B) Implement security groups and configure outbound rules to only permit traffic to software depots.
• C) Move all your instances into private VPC subnets remove default routes from all routing tables and add specific routes to the software depots and distributions only.
• D) Implement network access control lists to all specific destinations, with an Implicit deny all rule.

---

Definitions:

Straight-Line Depreciation

A method used in accounting to allocate the cost of a tangible asset over its useful life evenly.

Electricity Costs

The financial charges for the consumption of electrical energy by a business, forming part of its operating expenses.

Factory Supervisor

A managerial position responsible for overseeing the daily operations of a manufacturing facility, ensuring production targets are met efficiently.

Mixed Cost

A cost composed of a fixed and a variable component and changes in total in response to activity level changes.