ExamGecko
Question list
Search
Search

List of questions

Search

Related questions











Question 324 - SOA-C02 discussion

Report
Export

A SysOps administrator is responsible for managing a fleet of Amazon EC2 instances. These EC2 instances upload build artifacts to a third-party service. The third-party service recently implemented a strict IP allow list that requires all build uploads to come from a single IP address.

What change should the systems administrator make to the existing build fleet to comply with this new requirement?

A.
Move all of the EC2 instances behind a NAT gateway and provide the gateway IP address to the service.
Answers
A.
Move all of the EC2 instances behind a NAT gateway and provide the gateway IP address to the service.
B.
Move all of the EC2 instances behind an internet gateway and provide the gateway IP address to the service.
Answers
B.
Move all of the EC2 instances behind an internet gateway and provide the gateway IP address to the service.
C.
Move all of the EC2 instances into a single Availability Zone and provide the Availability Zone IP address to the service.
Answers
C.
Move all of the EC2 instances into a single Availability Zone and provide the Availability Zone IP address to the service.
D.
Move all of the EC2 instances to a peered VPC and provide the VPC IP address to the service.
Answers
D.
Move all of the EC2 instances to a peered VPC and provide the VPC IP address to the service.
Suggested answer: A

Explanation:

To ensure all EC2 instances upload build artifacts through a single IP address:

A: Move all of the EC2 instances behind a NAT gateway. Provide the IP address of the NAT gateway to the third-party service for the allow list. A NAT gateway enables instances in a private subnet to connect to services outside AWS (such as a third-party service) but prevents the internet from initiating connections with those instances. Using a NAT gateway standardizes all outgoing traffic to use a single IP address. More information on NAT gateways can be found in AWS documentation NAT Gateways.

asked 16/09/2024
Vimal Varughese
42 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first