A Company Plans to Stop Using Amazon EC2 Key Pairs

question 419

Multiple Choice

A company plans to stop using Amazon EC2 key pairs for SSH access, and instead plans to use AWS Systems Manager Session Manager. To further enhance security, access to Session Manager must take place over a private network only. Which combinations of actions will accomplish this? (Choose two.)

• A) Allow inbound access to TCP port 22 in all associated EC2 security groups from the VPC CIDR range.
• B) Attach an IAM policy with the necessary Systems Manager permissions to the existing IAM instance profile.
• C) Create a VPC endpoint for Systems Manager in the desired Region.
• D) Deploy a new EC2 instance that will act as a bastion host to the rest of the EC2 instance fleet.
• E) Remove any default routes in the associated route tables.

---

Definitions:

Marginal-Cost Curve

A graphical representation that shows how the cost of producing one additional unit of a good varies as the production volume changes.

Average-Fixed-Cost Curve

A graphical representation that shows the fixed costs of production per unit of output declining as the quantity of output increases.

Marginal-Cost Curve

A graphical representation that shows the cost of producing one more unit of a good.

Average-Total-Cost Curve

A graphical representation showing how the average total cost of production changes as the quantity of output is altered.