An application runs in a VPC on Amazon EC2 instances behind an Application Load Balancer. Traffic to the Amazon EC2 instances must be limited to traffic from the Application Load Balancer.Based on these requirements, the security group configuration should only allow traffic from:

Question

Accepted Answer

the VPC CIDR

Answer

the public IPs of the Application Load Balancer nodes.

Answer

the IP range of the Application Load Balancer subnets.

Answer

the security group attached to the Application Load Balancer.

Home / Amazon / SAA-C01 / Question 320

Question 320

An application runs in a VPC on Amazon EC2 instances behind an Application Load Balancer. Traffic to the Amazon EC2 instances must be limited to traffic from the Application Load Balancer.Based on these requirements, the security group configuration should only allow traffic from:

Answers

A. the public IPs of the Application Load Balancer nodes.

B. the IP range of the Application Load Balancer subnets.

C. the security group attached to the Application Load Balancer.

D. the VPC CIDR

Comments