Exam AWS Certified SysOps Administrator - Associate topic 1 question 50 discussion

Exam question from Amazon's AWS Certified SysOps Administrator - Associate

Question #: 50
Topic #: 1

[All AWS Certified SysOps Administrator - Associate Questions]

A SysOps administrator is investigating why a user has been unable to use RDP to connect over the internet from their home computer to a bastion server running on an Amazon EC2 Windows instance.
Which of the following are possible causes of this issue? (Choose two.)

A. A network ACL associated with the bastion's subnet is blocking the network traffic.
B. The instance does not have a private IP address.
C. The route table associated with the bastion's subnet does not have a route to the internet gateway.
D. The security group for the instance does not have an inbound rule on port 22.
E. The security group for the instance does not have an outbound rule on port 3389.

Show Suggested Answer

Suggested Answer: AC 🗳️

by haxaffee at Sept. 3, 2022, 7:31 p.m.

Disclaimers:

- ExamTopics website is not related to, affiliated with, endorsed or authorized by Amazon.
- Trademarks, certification & product names are used for reference only and belong to Amazon.

Comments

Submit Cancel

haxaffee

Highly Voted 2 years, 3 months ago

Selected Answer: AC

Correct.

upvoted 8 times

...

Geek20

Most Recent 8 months, 1 week ago

A&C are correct

upvoted 1 times

...

jipark

1 year, 4 months ago

Selected Answer: AC

not D : RDP uses port 3389

upvoted 2 times

...

fazlur21

1 year, 6 months ago

ac correct

upvoted 1 times

...

MrMLB

2 years ago

The possible causes of this issue are: A. A network ACL associated with the bastion's subnet is blocking the network traffic. C. The route table associated with the bastion's subnet does not have a route to the internet gateway. E. The security group for the instance does not have an outbound rule on port 3389.

upvoted 4 times

student2020

1 year, 11 months ago

E is wrong, the rule for 3389 must be inbound NOT outbound

upvoted 3 times

...

AgboolaKun

7 months, 2 weeks ago

E is wrong because security groups are stateful. You only need to specify an inbound rule, outbound allows all traffic.

upvoted 1 times

...

Jamshif01

2 years, 1 month ago

A - can be B - he is connecting via public anyway this is irrelevant C - yes it should have access to internet so he can connect outside D - this is for linux only E - can be so it's either AE or CE I vote for CE

upvoted 2 times