Amazon Exam ANS-C01 Topic 4 Question 35 Discussion

Actual exam question for Amazon's ANS-C01 exam

Question #: 35
Topic #: 4

A company needs to manage Amazon EC2 instances through command line interfaces for Linux hosts and Windows hosts. The EC2 instances are deployed in an environment in which there is

no route to the internet. The company must implement role-based access control for management of the instances. The company has a standalone on-premises environment.

Which approach will meet these requirements with the LEAST maintenance overhead?

ASet up an AWS Direct Connect connection between the on-premises environment and the VPC where the instances are deployed. Configure routing, security groups, and ACLs.
Connect to the instances by using the Direct Connect connection.

BDeploy and configure AWS Systems Manager Agent (SSM Agent) on each instance. Deploy VPC endpoints for Systems Manager Session Manager. Connect to the instances by
using Session Manager.

CEstablish an AWS Site-to-Site VPN connection between the on-premises environment and the VPC where the instances are deployed. Configure routing, security groups, and
ACLs. Connect to the instances by using the Site-to-Site VPN connection.

DDeploy an appliance to the VPC where the instances are deployed. Assign a public IP address to the appliance. Configure security groups and ACLs. Connect to the instances by
using the appliance as an intermediary.

Show Suggested Answer

Suggested Answer: B

The correct approach is to use AWS Systems Manager Session Manager, which allows you to manage your EC2 instances through a secure and browser-based interface. By deploying and configuring SSM Agent on each instance, you can enable Session Manager to communicate with the instances. By deploying VPC endpoints for Session Manager, you can enable the instances to connect to the AWS service without requiring an internet gateway, NAT device, or VPN connection. You can also use IAM policies and SSM documents to implement role-based access control for managing the instances. This approach has the least maintenance overhead, as it does not require any additional infrastructure or configuration.

by Verdell at Sep 06, 2024, 01:52 PM

Limited Time Offer

25%

2 months ago

Is it just me, or does Option D sound like it might involve a 'special' appliance that someone's cousin's friend's uncle invented? I'll stick with the proven AWS tools, thanks.

upvoted 0 times

James

25 days ago

Definitely, let's go with the proven AWS tools for managing the EC2 instances.

upvoted 0 times

...

Noble

26 days ago

Yeah, setting up an AWS Direct Connect or Site-to-Site VPN seems like more work. Systems Manager Agent sounds simpler.

upvoted 0 times

...

Luke

1 months ago

I think Option B with Systems Manager Agent and Session Manager is the way to go for least maintenance overhead.

upvoted 0 times

...

Penney

1 months ago

Option D does sound a bit sketchy. I agree, sticking with AWS tools is the safer choice.

upvoted 0 times

...

3 months ago

Definitely B. The AWS Systems Manager tools should provide a more streamlined approach to managing the instances in this scenario.

upvoted 0 times

Caprice

2 months ago

I think setting up an AWS Direct Connect connection would be too much maintenance overhead.

upvoted 0 times

...

Graham

2 months ago

I agree, using AWS Systems Manager Agent and Session Manager seems like the best option.

upvoted 0 times

...

Toi

3 months ago

I agree, B is the best choice here. Maintaining a Direct Connect or VPN connection could be a real headache, especially with no internet access.

upvoted 0 times

...

Andra

3 months ago

Option B seems like the way to go. The SSM Agent and Session Manager should make it easier to manage the instances without needing to set up a complex network connection.

upvoted 0 times

Elouise

3 months ago

Yeah, setting up VPC endpoints for Session Manager will definitely simplify managing the instances.

upvoted 0 times

...

Pamella

3 months ago

I agree, Option B with SSM Agent and Session Manager seems like the most efficient choice.

upvoted 0 times

...