Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

Amazon ANS-C01 Exam - Topic 1 Question 43 Discussion

A company needs to manage Amazon EC2 instances through command line interfaces for Linux hosts and Windows hosts. The EC2 instances are deployed in an environment in which there is no route to the internet. The company must implement role-based access control for management of the instances. The company has a standalone on-premises environment.Which approach will meet these requirements with the LEAST maintenance overhead?
B) Deploy and configure AWS Systems Manager Agent (SSM Agent) on each instance. Deploy VPC endpoints for Systems Manager Session Manager. Connect to the instances by using Session Manager.
A) Set up an AWS Direct Connect connection between the on-premises environment and the VPC where the instances are deployed. Configure routing, security groups, and ACLs. Connect to the instances by using the Direct Connect connection.
C) Establish an AWS Site-to-Site VPN connection between the on-premises environment and the VPC where the instances are deployed. Configure routing, security groups, and ACLs. Connect to the instances by using the Site-to-Site VPN connection.
D) Deploy an appliance to the VPC where the instances are deployed. Assign a public IP address to the appliance. Configure security groups and ACLs. Connect to the instances by using the appliance as an intermediary.

Amazon ANS-C01 Exam - Topic 1 Question 43 Discussion

Actual exam question for Amazon's ANS-C01 exam
Question #: 43
Topic #: 1
[All ANS-C01 Questions]

A company needs to manage Amazon EC2 instances through command line interfaces for Linux hosts and Windows hosts. The EC2 instances are deployed in an environment in which there is no route to the internet. The company must implement role-based access control for management of the instances. The company has a standalone on-premises environment.

Which approach will meet these requirements with the LEAST maintenance overhead?

Show Suggested Answer Hide Answer
Suggested Answer: B

by Mable at Dec 07, 2024, 07:34 PM

Limited Time Offer

25%

Off

Get Premium ANS-C01 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

0/2000 characters
Submit Cancel
Merlyn
6 months ago
Wait, can you really manage without internet access?
upvoted 0 times
...
Sabina
6 months ago
A Direct Connect sounds complicated for this setup.
upvoted 0 times
...
Janna
7 months ago
Not sure about B, what if the SSM Agent fails?
upvoted 0 times
...
Quentin
7 months ago
I agree, SSM Agent is super handy!
upvoted 0 times
...
Melita
7 months ago
Option B seems like the best choice for low maintenance.
upvoted 0 times
...
Tran
7 months ago
I feel like the VPN option could work, but it might require more configuration than just using SSM. I'm leaning towards B as well.
upvoted 0 times
...
Nada
7 months ago
I practiced a similar question where we had to connect to instances without internet access. I think Session Manager is usually the easiest to set up.
upvoted 0 times
...
Ayesha
8 months ago
I'm not entirely sure, but I think Direct Connect could be a good option too. It might have more overhead though, right?
upvoted 0 times
...
Marquetta
8 months ago
I remember studying about AWS Systems Manager, and it seems like option B might be the best choice since it minimizes maintenance.
upvoted 0 times
...
Audry
8 months ago
Option D with the appliance could work, but I'm not sure how secure that would be. Definitely need to dig into the details on that one.
upvoted 0 times
...
Kenia
8 months ago
Option C with the Site-to-Site VPN is an interesting idea, but I'm worried about the configuration complexity. Might be more work than necessary.
upvoted 0 times
...
Katlyn
8 months ago
Option A with Direct Connect seems the most robust, but I'm not sure if the maintenance overhead would be the lowest. Gotta think this through.
upvoted 0 times
...
Tashia
8 months ago
Hmm, no internet access is a challenge. I'm leaning towards option B with Systems Manager - that seems like it could work well in this scenario.
upvoted 0 times
...
Margarett
8 months ago
This looks like a tricky one. I'll need to carefully consider the requirements and weigh the pros and cons of each approach.
upvoted 0 times
...
Glen
1 year ago
Yeah, D is a bit overkill. You'd have to maintain that appliance and configure all the networking rules. B is the simplest and most efficient option.
upvoted 0 times
Leah
1 year ago
Definitely. B is the simplest and most efficient choice.
upvoted 0 times
...
Johana
1 year ago
I think B is the best option too. Less maintenance overhead.
upvoted 0 times
...
Jules
1 year ago
Yeah, B is definitely the way to go. Simple and efficient.
upvoted 0 times
...
Nathalie
1 year ago
I agree, D does seem like a lot of work.
upvoted 0 times
...
...
Boris
1 year ago
Haha, imagine having to manage a whole appliance just to connect to your instances. D is way too much work for this scenario.
upvoted 0 times
Brandee
1 year ago
C) Establish an AWS Site-to-Site VPN connection between the on-premises environment and the VPC where the instances are deployed. Configure routing, security groups, and ACLs. Connect to the instances by using the Site-to-Site VPN connection.
upvoted 0 times
...
Veda
1 year ago
B) Deploy and configure AWS Systems Manager Agent (SSM Agent) on each instance. Deploy VPC endpoints for Systems Manager Session Manager. Connect to the instances by using Session Manager.
upvoted 0 times
...
Rochell
1 year ago
A) Set up an AWS Direct Connect connection between the on-premises environment and the VPC where the instances are deployed. Configure routing, security groups, and ACLs. Connect to the instances by using the Direct Connect connection.
upvoted 0 times
...
...
Frederica
1 year ago
That's true, but it also requires more maintenance overhead compared to using Session Manager.
upvoted 0 times
...
Earnestine
1 year ago
But wouldn't setting up a Direct Connect connection provide more control over the network traffic?
upvoted 0 times
...
Jeannine
1 year ago
I agree, B is the way to go. No need to deal with the complexities of a Direct Connect or VPN setup when you have the convenience of Session Manager.
upvoted 0 times
...
Aleisha
1 year ago
I agree, using Systems Manager Session Manager seems like the most efficient way to manage the instances.
upvoted 0 times
...
Herminia
1 year ago
Option B seems like the best choice here. Using the SSM Agent and Session Manager reduces the maintenance overhead compared to setting up a Direct Connect or VPN connection.
upvoted 0 times
Adolph
1 year ago
Definitely, it's a more efficient solution for managing the EC2 instances.
upvoted 0 times
...
Domingo
1 year ago
I agree, Option B with SSM Agent and Session Manager is the way to go.
upvoted 0 times
...
...
Daryl
2 years ago
I think option B is the best approach.
upvoted 0 times
...

Save Cancel