What should a SysOps administrator do to resolve this error?

A company’s backend infrastructure contains an Amazon EC2 instance in a private subnet. The private subnet has a route to the internet through a NAT gateway in a public subnet. The instance must allow connectivity to a secure web server on the internet to retrieve data at regular intervals.

The client software times out with an error message that indicates that the client software could not establish the TCP connection.

What should a SysOps administrator do to resolve this error?
A . Add an inbound rule to the security group for the EC2 instance with the following parameters:
Type – HTTP, Source – 0.0.0.0/0.
B . Add an inbound rule to the security group for the EC2 instance with the following parameters:
Type – HTTPS, Source – 0.0.0.0/0.
C . Add an outbound rule to the security group for the EC2 instance with the following parameters:
Type – HTTP, Destination – 0.0.0.0/0.
D . Add an outbound rule to the security group for the EC2 instance with the following parameters:
Type – HTTPS. Destination – 0.0.0.0/0.

View Answer

Answer: D

Explanation:

To allow the EC2 instance in the private subnet to establish a secure connection to an external web server, follow these steps:

Modify Security Group:

Add an outbound rule to the security group of the EC2 instance with the following parameters:

Type: HTTPS

Destination: 0.0.0.0/0

This allows outbound HTTPS traffic to the internet.

Reference: Security Group Rules

Ensure NAT Gateway Configuration:

Ensure that the NAT gateway is properly configured in the public subnet to allow internet access for the instances in the private subnet.

Reference: NAT Gateways

This configuration will resolve the connectivity issue.