AWS Certified Security - Specialty SCS-C02 — Topic 1 Question 247

Question

A company needs to use HTTPS when connecting to its web applications to meet compliance requirements. These web applications run in Amazon VPC on Amazon EC2 instances behind an Application Load Balancer (ALB). A security engineer wants to ensure that the load balancer will only accept connections over port 443, even if the ALB is mistakenly configured with an HTTP listener. Which configuration steps should the security engineer take to accomplish this task?

Accepted Answer

Correct answer: D. The correct answer is D. Option D: Create a security group with a single inbound rule that allows connections from 0.0.0.0/0 on port 443. Ensure this security group is the only one associated with the ALB.

AWS Certified Security - Specialty SCS-C02 — Question 247