Amazon Exam SCS-C02 Topic 6 Question 29 Discussion

Actual exam question for Amazon's SCS-C02 exam

Question #: 29
Topic #: 6

A Network Load Balancer (NLB) target instance is not entering the InService state. A security engineer determines that health checks are failing.

Which factors could cause the health check failures? (Select THREE.)

AThe target instance's security group does not allow traffic from the NLB.

BThe target instance's security group is not attached to the NLB.

CThe NLB's security group is not attached to the target instance.

DThe target instance's subnet network ACL does not allow traffic from the NLB.

EThe target instance's security group is not using IP addresses to allow traffic from the NLB.

FThe target network ACL is not attached to the NLB.

Show Suggested Answer

Suggested Answer: A, C, D

by julien at Sep 16, 2024, 09:43 AM

Limited Time Offer

25%

Off

Get Premium SCS-C02 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Terrilyn

2 months ago

E? Really? Who uses IP addresses these days? This is like asking for a floppy disk drive in a modern laptop.

upvoted 0 times

Mose

1 months ago

C: Let's make sure everything is properly configured before ruling out any options.

upvoted 0 times

...

Tatum

2 months ago

B: Yeah, it's important to check all possible factors.

upvoted 0 times

...

Danica

2 months ago

A: A, C, D could also be causing the health check failures.

upvoted 0 times

...

Lawanda

3 months ago

I'm not sure about option F though. Can someone explain why the target network ACL not being attached to the NLB could cause issues?

upvoted 0 times

...

Rory

3 months ago

I agree with Sabina. If the security group or network ACL doesn't allow traffic from the NLB, the health checks will fail.

upvoted 0 times

...

Deonna

3 months ago

I'm going with A, B, and D. The NLB needs to be properly configured and authorized to access the target instance.

upvoted 0 times

...

Florinda

3 months ago

Hah, I bet the target instance is using a VPN to hide from the NLB. This is a job for the IT Ghostbusters!

upvoted 0 times

...

Lynelle

3 months ago

A, D, and E are the correct answers. The NLB needs to be able to communicate with the target instance, and the security group and network ACL settings are crucial for that.

upvoted 0 times

Jacinta

2 months ago

E) The target instance's security group is not using IP addresses to allow traffic from the NLB.

upvoted 0 times

...

Cristy

2 months ago

D) The target instance's subnet network ACL does not allow traffic from the NLB.

upvoted 0 times

...

Nickolas

2 months ago

A) The target instance's security group does not allow traffic from the NLB.

upvoted 0 times

...

Sabina

3 months ago

I think option A, D, and E could cause the health check failures.

upvoted 0 times

...