Exam AWS Certified Solutions Architect - Professional topic 1 question 178 discussion

C. The organization should create two network interfaces with separate subnets so one instance can have two subnets and the respective security groups for controlled access.

The correct answer is: C. The organization should create two network interfaces with separate subnets so one instance can have two subnets and the respective security groups for controlled access. To achieve the desired configuration of allowing internet traffic to the web server and back-end management traffic with SSH access from a selected IP range, the organization can create two network interfaces for the single instance. By creating two network interfaces, the organization can assign separate subnets to each network interface. One network interface can be associated with a subnet that allows internet traffic, while the other network interface can be associated with a subnet for back-end management traffic.

Tried creating an EC2 with two interfaces in separate subnet but same AZ and it works.

An instance can't be in 2 subnets, so C is wrong. An instance can, however, have 2 interfaces with 2 IP's. So B is my answer.

It's ONLY C. As for ENIs in two subnets for the same EC2 instance, it's very much possible per this link- https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/scenarios-enis.html

C is correct!

ANS = C. You Can attach multiple ENI to EC2 with different subnet in Single VPC but Subnet should be in same AZ you cannot attach with different AZ.

Real world: production and mgmt should be separated. And mgmt should not be allowed to ssh directly from internet, should be allowed from VPN where employee first vpn in and then do the mgmt work.

C is correct. An instance can have multiple ENIs attached to it, and you can deploy those ENIs into different subnets for more granular security configurations, such as the scenario in the question.

C is only answer

B: is the answer. its possible to attach more than one network interface and separate security groups with each ENI A: Wrong, its possible to have 2 IP addresses using 2 network interface cards attached to the instance C: No possible. One instance cannot be available to 2 subnets at the same time d: Not possible

C. https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/scenarios-enis.html

Of course C

Correct Answer C: Scenarios for network interfaces Attaching multiple network interfaces to an instance is useful when you want to: Create a management network. Use network and security appliances in your VPC. Create dual-homed instances with workloads/roles on distinct subnets. Create a low-budget, high-availability solution. https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/scenarios-enis.html