Cisco 300-440 Exam - Topic 2 Question 18 Discussion

Actual exam question for Cisco's 300-440 exam

Question #: 18
Topic #: 2

A cloud engineer is setting up a new set of nodes in the AWS EKS cluster to manage database integration with Mongo Atlas. The engineer set up security to Mongo but now wants to ensure that the nodes are also secure on the network side. Which feature in AWS should the engineer use?

Bsecurity groups

AEC2 Trust Lock

Dkey pairs

Ctagging

Show Suggested Answer

Suggested Answer: B

Security groups are a feature in AWS that allow you to control the inbound and outbound traffic to your instances. They act as a virtual firewall that can filter the traffic based on the source, destination, protocol, and port. You can assign one or more security groups to your instances, and each security group can have multiple rules. Security groups are stateful, meaning that they automatically allow the response traffic for any allowed inbound traffic, and vice versa. Security groups are essential for securing your nodes in the AWS EKS cluster, as they can prevent unauthorized access to your Mongo Atlas database or other resources. You can also use security groups to isolate your nodes from other instances in the same VPC or subnet, or to allow communication between nodes in different clusters or regions.Reference:=

AWS Security Groups

Security Groups for Your VPC

Security Groups for Your Amazon EC2 Instances

Security Groups for Your Amazon EKS Cluster

by Mollie at Jan 24, 2026, 01:41 AM

Limited Time Offer

25%

Off

Get Premium 300-440 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Tyra

4 days ago

I believe the best option would be to use AWS PrivateLink to securely connect to Mongo Atlas without exposing the nodes to the public internet.

upvoted 0 times

...

Starr

10 days ago

I practiced a similar question about securing nodes in EKS, and I think VPC Peering might be involved, but I'm not confident about that.

upvoted 0 times

...

Launa

1 month ago

I'm not entirely sure, but I remember something about Network ACLs being important for network security in AWS. Could that be relevant here?

upvoted 0 times

...

Agustin

1 month ago

I think the engineer should consider using Security Groups to control inbound and outbound traffic for the nodes. That sounds familiar from my studies.

upvoted 0 times

...

Stevie

1 month ago

Hmm, not 100% sure on this one. I'd want to review the AWS documentation on EKS networking and security to make sure I fully understand the options available. Probably a good idea to jot down a few key points before answering.

upvoted 0 times

...

Herminia

2 months ago

I've worked with EKS and Mongo Atlas before, so this feels pretty straightforward to me. I'd recommend looking into Amazon VPC and the security features it provides to lock down the network access to those EKS nodes.

upvoted 0 times

...

Glendora

2 months ago

Okay, for this one I'd probably focus on looking at the AWS networking services that can help secure the EKS nodes. Things like VPC, security groups, and network ACLs seem like they could be relevant here.

upvoted 0 times

...

Eden

2 months ago

Hmm, this seems like it could be a tricky one. I'd want to make sure I understand the specific networking requirements for integrating Mongo Atlas with EKS. Might need to do some research on best practices there.

upvoted 0 times

...

Belen

2 months ago

I think I'd start by reviewing the AWS security features that are relevant for EKS clusters and network security. Maybe look into things like security groups, network ACLs, or VPC peering.

upvoted 0 times

...