Exam AWS Certified Solutions Architect - Professional SAP-C02 topic 1 question 399 discussion

Exam question from Amazon's AWS Certified Solutions Architect - Professional SAP-C02

Question #: 399
Topic #: 1

[All AWS Certified Solutions Architect - Professional SAP-C02 Questions]

A company wants to migrate its website from an on-premises data center onto AWS. At the same time, it wants to migrate the website to a containerized microservice-based architecture to improve the availability and cost efficiency. The company’s security policy states that privileges and network permissions must be configured according to best practice, using least privilege.

A solutions architect must create a containerized architecture that meets the security requirements and has deployed the application to an Amazon ECS cluster.

What steps are required after the deployment to meet the requirements? (Choose two.)

A. Create tasks using the bridge network mode.
B. Create tasks using the awsvpc network mode.
C. Apply security groups to Amazon EC2 instances, and use IAM roles for EC2 instances to access other resources.
D. Apply security groups to the tasks, and pass IAM credentials into the container at launch time to access other resources.
E. Apply security groups to the tasks, and use IAM roles for tasks to access other resources.

Show Suggested Answer

Suggested Answer: BE 🗳️

by cypkir at Nov. 22, 2023, 8:18 a.m.

Disclaimers:

- ExamTopics website is not related to, affiliated with, endorsed or authorized by Amazon.
- Trademarks, certification & product names are used for reference only and belong to Amazon.

Comments

Submit Cancel

SIJUTHOMASP

6 months ago

Selected Answer: BE

Apply security groups to tasks is right with IAM role. Option D says IAM identity which is working. So, BE.

upvoted 1 times

...

1 year, 1 month ago

B. Crie tarefas usando o modo de rede awsvpc. E. Aplique grupos de segurança às tarefas e use funções do IAM para tarefas para acessar outros recursos.

upvoted 2 times

...