Exam AWS Certified Solutions Architect - Professional topic 1 question 57 discussion

Exam question from Amazon's AWS Certified Solutions Architect - Professional

Question #: 57
Topic #: 1

[All AWS Certified Solutions Architect - Professional Questions]

You are designing an intrusion detection prevention (IDS/IPS) solution for a customer web application in a single VPC. You are considering the options for implementing IOS IPS protection for traffic coming from the Internet.
Which of the following options would you consider? (Choose two.)

A. Implement IDS/IPS agents on each Instance running in VPC
B. Configure an instance in each subnet to switch its network interface card to promiscuous mode and analyze network traffic.
C. Implement Elastic Load Balancing with SSL listeners in front of the web applications
D. Implement a reverse proxy layer in front of web servers and configure IDS/IPS agents on each reverse proxy server.

Show Suggested Answer

Suggested Answer: AD 🗳️
EC2 does not allow promiscuous mode, and you cannot put something in between the ELB and the web server (like a listener or IDP)

by cldy at April 1, 2021, 8:23 a.m.

Disclaimers:

- ExamTopics website is not related to, affiliated with, endorsed or authorized by Amazon.
- Trademarks, certification & product names are used for reference only and belong to Amazon.

Comments

Submit Cancel

amministrazione

10 months, 2 weeks ago

A. Implement IDS/IPS agents on each Instance running in VPC D. Implement a reverse proxy layer in front of web servers and configure IDS/IPS agents on each reverse proxy server.

upvoted 2 times

...