Exam AWS-SysOps topic 1 question 884 discussion

Exam question from Amazon's AWS-SysOps

Question #: 884
Topic #: 1

A company's security policy states that connecting to Amazon EC2 instances is not permitted through SSH and RDP. If access is required, authorized staff can connect to instances by using AWS Systems Manager Session Manager.
Users report that they are unable to connect to one specific Amazon EC2 instance that is running Ubuntu and has AWS Systems Manager Agent (SSM Agent) pre-installed. These users are able to use Session Manager to connect to other instances in the same subnet, and they are in an IAM group that has Session
Manager permission for all instances.
What should a SysOps administrator do to resolve this issue?

A. Add an inbound rule for port 22 in the security group associated with the Ubuntu instance.
B. Assign the AmazonSSMManagedInstanceCore managed policy to the EC2 instance profile for the Ubuntu instance.
C. Configure the SSM Agent to log in with a user name of ג€ubuntuג€.
D. Generate a new key pair, configure Session Manager to use this new key pair, and provide the private key to the users.

Show Suggested Answer

Suggested Answer: B 🗳️

by binhdt2611 at May 6, 2021, 8:48 a.m.

Disclaimers:

- ExamTopics website is not related to, affiliated with, endorsed or authorized by Amazon.
- Trademarks, certification & product names are used for reference only and belong to Amazon.

Comments

Submit Cancel

binhdt2611

Highly Voted 2 years, 6 months ago

I think is B https://docs.aws.amazon.com/systems-manager/latest/userguide/setup-instance-profile.html

upvoted 7 times

...

albert_kuo

Most Recent 9 months, 1 week ago

Selected Answer: B

By assigning the AmazonSSMManagedInstanceCore managed policy to the EC2 instance profile, you provide the necessary permissions for the instance to interact with AWS Systems Manager services, including Session Manager. This policy includes the required permissions for the instance to communicate with the Systems Manager service and allows users in the IAM group with Session Manager permission to connect to the instance using Session Manager.

upvoted 1 times

...

random_007

2 years, 5 months ago

Answer B

upvoted 1 times

...

Rijndael

2 years, 6 months ago

Ill go with B

upvoted 3 times

...

Exam AWS-SysOps All Questions

View all questions & answers for the AWS-SysOps exam