Amazon SCS-C02 Online Practice Questions and Exam Preparation

Amazon SCS-C02 Online Questions & Answers

• Question 851:

  A Systems Engineer is troubleshooting the connectivity of a test environment that includes a virtual security appliance deployed inline. In addition to using the virtual security appliance, the Development team wants to use security groups and network ACLs to accomplish various security requirements in the environment.

  What configuration is necessary to allow the virtual security appliance to route the traffic?

  A. Disable network ACLs.
  B. Configure the security appliance's elastic network interface for promiscuous mode.
  C. Disable the Network Source/Destination check on the security appliance's elastic network interface
  D. Place the security appliance in the public subnet with the internet gateway
  C. Disable the Network Source/Destination check on the security appliance's elastic network interface

  ---

  Each EC2 instance performs source/destination checks by default. This means that the instance must be the source or destination of any traffic it sends or receives. In this case virtual security appliance instance must be able to send and receive traffic when the source or destination is not itself. Therefore, you must disable source/destination checks on the NAT instance."