ExamGecko
Question list
Search
Search

List of questions

Search

Related questions











Question 130 - SAP-C01 discussion

Report
Export

An organization has created multiple components of a single application for compartmentalization. Currently all the components are hosted on a single EC2 instance. Due to security reasons the organization wants to implement two separate SSLs for the separate modules although it is already using VPC.

How can the organization achieve this with a single instance?

A.
You have to launch two instances each in a separate subnet and allow VPC peering for a single IP.
Answers
A.
You have to launch two instances each in a separate subnet and allow VPC peering for a single IP.
B.
Create a VPC instance which will have multiple network interfaces with multiple elastic IP addresses.
Answers
B.
Create a VPC instance which will have multiple network interfaces with multiple elastic IP addresses.
C.
Create a VPC instance which will have both the ACL and the security group attached to it and have separate rules for each IP address.
Answers
C.
Create a VPC instance which will have both the ACL and the security group attached to it and have separate rules for each IP address.
D.
Create a VPC instance which will have multiple subnets attached to it and each will have a separate IP address.
Answers
D.
Create a VPC instance which will have multiple subnets attached to it and each will have a separate IP address.
Suggested answer: B

Explanation:

A Virtual Private Cloud (VPC) is a virtual network dedicated to the user's AWS account. It enables the user to launch AWS resources into a virtual network that the user has defined. With VPC the user can specify multiple private IP addresses for his instances.

The number of network interfaces and private IP addresses that a user can specify for an instance depends on the instance type. With each network interface the organization can assign an EIP. This scenario helps when the user wants to host multiple websites on a single EC2 instance by using multiple SSL certificates on a single server and associating each certificate with a specific EIP address. It also helps in scenarios for operating network appliances, such as firewalls or load balancers that have multiple private IP addresses for each network interface.

Reference: http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/MultipleIP.html

asked 16/09/2024
Khuong Tang
31 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first