Configuring an EC2 Windows Bastion Host for Remote Administration

Ensuring Secure Remote Administration for EC2 Windows Servers

Prev Question Next Question

Question

Your company owns several EC2 Windows servers in production.

In order to be compliant with recent company security policies, you need to create an EC2 Windows bastion host for users to connect to the instances via the Remote Desktop Protocol (RDP)

How would you ensure that users can perform remote administration for the Windows servers ONLY through the new bastion host?

Answers

A. Configure the security groups of the Windows server instances to only accept TCP/3389 connections from the security group of the Windows bastion host.

B. Configure the security group of the Windows bastion host to only allow RDP from the company’s IP addresses.

C. Add a NACL rule in the subnets of the Windows server instances to deny TCP/443 and TCP/22.

D. In the NACL of the bastion host server, allow the inbound and outbound traffic for TCP/3389.

Show Answer

Explanations

Click on the arrows to vote for the correct answer

A. B. C. D.

Prev Question Next Question