exam questions

Exam AWS-SysOps All Questions

View all questions & answers for the AWS-SysOps exam

Exam AWS-SysOps topic 1 question 149 discussion

Exam question from Amazon's AWS-SysOps
Question #: 149
Topic #: 1
[All AWS-SysOps Questions]

A user has configured a VPC with a new subnet. The user has created a security group. The user wants to configure that instances of the same subnet communicate with each other. How can the user configure this with the security group?

  • A. There is no need for a security group modification as all the instances can communicate with each other inside the same subnet
  • B. Configure the subnet as the source in the security group and allow traffic on all the protocols and ports
  • C. Configure the security group itself as the source and allow traffic on all the protocols and ports
  • D. The user has to use VPC peering to configure this
Show Suggested Answer Hide Answer
Suggested Answer: C 🗳️
A Virtual Private Cloud (VPC. is a virtual network dedicated to the user's AWS account. AWS provides two features that the user can use to increase security in
VPC: security groups and network ACLs. Security groups work at the instance level. If the user is using the default security group, it will have a rule which allows the instances to communicate with other. For a new security group, the user has to specify the rule, add it to define the source as the security group itself, and select all the protocols and ports for that source.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
karmaah
Highly Voted 3 years, 2 months ago
Important Point is : The user has created a security group.. So not default.
upvoted 5 times
...
BATSIE
Most Recent 9 months, 3 weeks ago
Selected Answer: C
Instances associated with the same security group can’t talk to each other unless you add rules allowing it (with the exception being the default security group). you have to add rules to make them able to communicate.
upvoted 1 times
...
Ivanyan
2 years, 5 months ago
Selected Answer: C
C. Configure the security group itself as the source and allow traffic on all the protocols and ports
upvoted 1 times
...
gehiyo
2 years, 5 months ago
Should be B. Intent is to allow instances in same subnet to communicate, so subnet CIDR should be source, not SG ID.
upvoted 1 times
...
awscertified
3 years, 2 months ago
C. Configure the security group itself as the source and allow traffic on all the protocols and ports
upvoted 4 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...