Application A runs on Amazon EC2 instances behind a Network Load Balancer (NLB). The EC2 instances are in an Auto Scaling group and are in the same subnet that is associated with the NLB. Other applications from an on-premises environment cannot communicate with Application A on port 8080.
To troubleshoot the issue, a SysOps administrator analyzes the flow logs. The flow logs include the following records:
What is the reason for the rejected traffic?

Question

Application A runs on Amazon EC2 instances behind a Network Load Balancer (NLB). The EC2 instances are in an Auto Scaling group and are in the same subnet that is associated with the NLB. Other applications from an on-premises environment cannot communicate with Application A on port 8080.

To troubleshoot the issue, a SysOps administrator analyzes the flow logs. The flow logs include the following records:

What is the reason for the rejected traffic?

Hendrik Woldhuis · Accepted Answer

The security group of the EC2 instances has no Allow rule for the traffic from the NLB.

Hendrik Woldhuis · Answer

The security group of the NLB has no Allow rule for the traffic from the on-premises environment.

Hendrik Woldhuis · Answer

The ACL of the on-premises environment does not allow traffic to the AWS environment.

Hendrik Woldhuis · Answer

The network ACL that is associated with the subnet does not allow outbound traffic for the ephemeral port range.

Question list

List of questions

Question 1

(0)

Question 2

(0)

Question 3

(0)

Question 4

(0)

Question 5

(0)

Question 6

(0)

Question 7

(0)

Question 8

(0)

Question 9

(0)

Question 10

(0)

Related questions

Question 196 - SOA-C02 discussion

Suggested answer: A

0 comments