Q349.A company recently deployed a new application that runs on a group of Amazon EC2 Linux instances in a VPC. In a peered VPC the company launched an EC2 Linux instance that serves as a bastion host. The security group of the

欢迎免费使用小程序搜题/刷题/查看解析,提升学历,成考自考报名,论文代写、论文查重请加客服微信skr-web


Q349.A company recently deployed a new application that runs on a group of Amazon EC2 Linux instances in a VPC. In a peered VPC the company launched an EC2 Linux instance that serves as a bastion host. The security group of the application instances allows access only on TCP port 22 from the private IP of the bastion host. The security group of the bastion host allows access to TCP port 22 from 0.0.0.0/0 So that system administrators can use SSH to remotely log in to the application instances from several branch offices.While looking through operating system logs on the bastion host a cloud engineer notices thousands of failed SSH logins to the bastion host from locations around the world. The cloud engineer wants to change how remote access is granted to the application instances and wants to meet the following requirements:--Eliminate brute-force SSH login attempts.--Retain a log of commands run during an SSH session.-- Retain the ability to forward ports.Which solution meets these requirements for remote access to the application instances?

A.Configure the application instances to communicate with AWS Systems Manager. Grant access to the system administrators to use Session Manager to establish a session with the application instances. Terminate the bastion host.
B.Update the security group of the bastion host to allow traffic from only the public IP addresses of the branch offices.
C.Configure an AWS Client VPN endpoint and provision each system administrator with a certificate to establish a VPN connection to the application VPC. Update the security group of the application instances to allow traffic from only the Client VPN IPv4 CIDR. Terminate the bastion host.
D.Configure the application instances to communicate with AWS Systems Manager. Grant access to the system administrators to issue commands to the application instances by using Systems Manager Run Command Terminate the bastion host.
正确答案A
访客
邮箱
网址

通用的占位符缩略图

人工智能机器人,扫码免费帮你完成工作


  • 自动写文案
  • 自动写小说
  • 马上扫码让Ai帮你完成工作
通用的占位符缩略图

人工智能机器人,扫码免费帮你完成工作

  • 自动写论文
  • 自动写软件
  • 我不是人,但是我比人更聪明,我是强大的Ai
Top