MENU
A company needs to manage Amazon EC2 instances through command line interfaces for Linux hosts and Windows hosts. The EC2 instances are deployed in an environment in which there is no route to the internet. The company must implement role-based access control for management of the instances. The company has a standalone on-premises environment.
Which approach will meet these requirements with the LEAST maintenance overhead?
Suggested Answer: B
Get Premium ANS-C01 Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
31 comments · newest first
ME
Merlyn
11 months ago
Wait, can you really manage without internet access?
SA
Sabina
11 months ago
A Direct Connect sounds complicated for this setup.
JA
Janna
11 months ago
Not sure about B, what if the SSM Agent fails?
QU
Quentin
11 months ago
I agree, SSM Agent is super handy!
ME
Melita
12 months ago
Option B seems like the best choice for low maintenance.
TR
Tran
12 months ago
I feel like the VPN option could work, but it might require more configuration than just using SSM. I'm leaning towards B as well.
NA
Nada
1 year ago
I practiced a similar question where we had to connect to instances without internet access. I think Session Manager is usually the easiest to set up.
AY
Ayesha
1 year ago
I'm not entirely sure, but I think Direct Connect could be a good option too. It might have more overhead though, right?
MA
Marquetta
1 year ago
I remember studying about AWS Systems Manager, and it seems like option B might be the best choice since it minimizes maintenance.
AU
Audry
1 year ago
Option D with the appliance could work, but I'm not sure how secure that would be. Definitely need to dig into the details on that one.
KE
Kenia
1 year ago
Option C with the Site-to-Site VPN is an interesting idea, but I'm worried about the configuration complexity. Might be more work than necessary.
KA
Katlyn
1 year ago
Option A with Direct Connect seems the most robust, but I'm not sure if the maintenance overhead would be the lowest. Gotta think this through.
TA
Tashia
1 year ago
Hmm, no internet access is a challenge. I'm leaning towards option B with Systems Manager - that seems like it could work well in this scenario.
MA
Margarett
1 year ago
This looks like a tricky one. I'll need to carefully consider the requirements and weigh the pros and cons of each approach.
GL
Glen
2 years ago
Yeah, D is a bit overkill. You'd have to maintain that appliance and configure all the networking rules. B is the simplest and most efficient option.
LE
Leah
2 years ago
Definitely. B is the simplest and most efficient choice.
JO
Johana
2 years ago
I think B is the best option too. Less maintenance overhead.
JU
Jules
2 years ago
Yeah, B is definitely the way to go. Simple and efficient.
NA
Nathalie
2 years ago
I agree, D does seem like a lot of work.
BO
Boris
2 years ago
Haha, imagine having to manage a whole appliance just to connect to your instances. D is way too much work for this scenario.
BR
Brandee
2 years ago
C) Establish an AWS Site-to-Site VPN connection between the on-premises environment and the VPC where the instances are deployed. Configure routing, security groups, and ACLs. Connect to the instances by using the Site-to-Site VPN connection.
VE
Veda
2 years ago
B) Deploy and configure AWS Systems Manager Agent (SSM Agent) on each instance. Deploy VPC endpoints for Systems Manager Session Manager. Connect to the instances by using Session Manager.
RO
Rochell
2 years ago
A) Set up an AWS Direct Connect connection between the on-premises environment and the VPC where the instances are deployed. Configure routing, security groups, and ACLs. Connect to the instances by using the Direct Connect connection.
FR
Frederica
2 years ago
That's true, but it also requires more maintenance overhead compared to using Session Manager.
EA
Earnestine
2 years ago
But wouldn't setting up a Direct Connect connection provide more control over the network traffic?
JE
Jeannine
2 years ago
I agree, B is the way to go. No need to deal with the complexities of a Direct Connect or VPN setup when you have the convenience of Session Manager.
AL
Aleisha
2 years ago
I agree, using Systems Manager Session Manager seems like the most efficient way to manage the instances.
HE
Herminia
2 years ago
Option B seems like the best choice here. Using the SSM Agent and Session Manager reduces the maintenance overhead compared to setting up a Direct Connect or VPN connection.
AD
Adolph
2 years ago
Definitely, it's a more efficient solution for managing the EC2 instances.
DO
Domingo
2 years ago
I agree, Option B with SSM Agent and Session Manager is the way to go.
DA
Daryl
2 years ago
I think option B is the best approach.