A Company Has Several Amazon EC2 Instances to Both Public

question 312

Multiple Choice

A company has several Amazon EC2 instances to both public and private subnets within a VPC that is not connected to the corporate network. A security group associated with the EC2 instances allows the company to use the Windows remote desktop protocol (RDP) over the internet to access the instances. The security team has noticed connection attempts from unknown sources. The company wants to implement a more secure solution to access the EC2 instances. Which strategy should a solutions architect implement?

• A) Deploy a Linux bastion host on the corporate network that has access to all instances in the VPC.
• B) Deploy AWS Systems Manager Agent on the EC2 instances. Access the EC2 instances using Session Manager restricting access to users with permission.
• C) Deploy a Linux bastion host with an Elastic IP address in the public subnet. Allow access to the bastion host from 0.0.0.0/0.
• D) Establish a Site-to-Site VPN connecting the corporate network to the VPC. Update the security groups to allow access from the corporate network only.

---

Definitions:

Conservatism Principle

an accounting principle that guides companies to report lower values for assets and revenues, higher values for liabilities and expenses when in doubt, ensuring that financial statements do not overstate the company’s financial position.

Impairment Loss

The amount by which the carrying amount of an asset exceeds its recoverable amount, leading to a decrease in the asset's value on the balance sheet.

Carrying Value

The book value of assets and liabilities recorded on the financial statements, often differing from market value.

Extraordinary Item

Events and transactions that are distinguished by their unusual nature and by the infrequency of their occurrence, requiring separate disclosure in financial statements for clarity.