Free Preparation Discussions
MENU
Amazon SOA-C03 Exam - Topic 1 Question 13 Discussion
Topic #: 1
A CloudOps engineer launches an Amazon EC2 Linux instance in a public subnet. When the instance is running, the CloudOps engineer obtains the public IP address and attempts to remotely connect to the instance multiple times. However, the CloudOps engineer always receives a timeout error.
Which action will allow the CloudOps engineer to remotely connect to the instance?
SSH access to a Linux EC2 instance requires inbound TCP port 22 to be allowed by the instance's security group from the administrator's source IP address. A timeout usually indicates that network traffic is being blocked before the SSH service can respond. Since the instance is in a public subnet and has a public IP address, the most likely missing control is an inbound security group rule. Security groups are stateful, so return traffic is automatically allowed after inbound SSH is permitted. Adding a route for the engineer's IP address is not needed because public subnets use a default route to the internet gateway. An outbound-only NACL or security group rule does not allow inbound SSH initiation. Therefore, the correct remediation is to allow inbound SSH from the engineer's public IP.
Kristal
1 day agoLouvenia
7 days agoValda
12 days agoHollis
17 days agoElbert
22 days agoEdna
27 days agoGlenna
1 month agoNakita
1 month agoRhea
1 month agoShawnna
2 months agoNicolette
2 months agoElinore
2 months agoTesha
2 months agoWillodean
2 months agoCathrine
4 months agoMyong
4 months agoLauryn
4 months ago