Cisco Designing and Implementing Cisco Service Provider Cloud Network Infrastructure (SPCNI v1.0) 300-540 Question # 5 Topic 1 Discussion
300-540 Exam Topic 1 Question 5 Discussion:
Question #: 5
Topic #: 1
An engineer must create a new VPC and deploy several Amazon EC2 instances in AWS. Only SSH connections originating from IP address 20.20.20.20 must be allowed to reach the EC2 instances. What must be configured?
AWSSecurity Groupsact as the primary stateful firewalls for EC2 instances.
To restrict SSH (TCP/22) to a single host (20.20.20.20/32), aSecurity Groupmust be configured with:
Inbound rule: TCP 22
Source: 20.20.20.20/32
ACLs operate at the subnet level but are not used for instance-specific SSH restrictions.
WAF controls HTTP/HTTPS traffic, not SSH.
Resource groups only organize cloud assets.
Thus,Bis the correct solution.
Contribute your Thoughts:
Chosen Answer:
This is a voting comment (?). You can switch to a simple comment. It is better to Upvote an existing comment if you don't have anything to add.
Submit