AWS Certified SAP on AWS - Specialty PAS-C01 — Topic 1 Question 25

Question

A company hosts multiple SAP applications on Amazon EC2 instances in a VPC. While monitoring the environment, the company notices that multiple port scans are attempting to connect to SAP portals inside the VPC. These port scans are originating from the same IP address block. The company must deny access to the VPC from all the offending IP addresses for the next 24 hours. Which solution will meet this requirement?

Accepted Answer

Correct answer: A. The correct answer is A. Option A: Modify network ACLs that are associated with all public subnets in the VPC to deny access from the IP address block.

AWS Certified SAP on AWS - Specialty PAS-C01 — Question 25