ExpertMedium1 markMultiple Choice
AWS SAP-C02 · Question 47 · Domain 3.1: Operational Excellence
During a major incident, the operations team needs to securely execute a series of diagnostic scripts on EC2 instances without opening inbound SSH ports or managing bastion hosts. How should they achieve this?
During a major incident, the operations team needs to securely execute a series of diagnostic scripts on EC2 instances without opening inbound SSH ports or managing bastion hosts. How should they achieve this?
Answer options:
A.
Use EC2 Instance Connect with temporary SSH keys.
B.
Use AWS Systems Manager Session Manager to connect to the instances.
C.
Deploy a VPN and connect via SSH.
D.
Use AWS CloudShell to SSH into the instances.
How to approach this question
Identify the service that provides shell access via the SSM agent (outbound only).
Full Answer
B.Use AWS Systems Manager Session Manager to connect to the instances.✓ Correct
Use AWS Systems Manager Session Manager to connect to the instances.
AWS Systems Manager Session Manager allows secure, interactive shell access to EC2 instances. It uses the SSM agent, which makes outbound connections to AWS, eliminating the need for inbound open ports.
Common mistakes
Choosing EC2 Instance Connect, which still relies on port 22 being open.
Practice the full AWS Solutions Architect Professional SAP-C02 Practice Exam 6
75 questions · hints · full answers · grading
More questions from this exam
Q01A global enterprise requires highly available hybrid connectivity between its on-premises data ce...HardQ02An organization has 50 VPCs across two AWS Regions connected via Transit Gateways (TGW). The TGWs...HardQ03A company uses AWS Organizations. The network team wants to share a central Transit Gateway (TGW)...MediumQ04An enterprise has on-premises data centers in the US and Europe. They want to use the AWS global ...HardQ05A company requires that all API calls to Amazon S3 from their VPC must not traverse the public in...Medium