QuestionQ96
Network Security, Compliance, and GovernanceA company runs a software solution on Amazon EC2 instances in a cluster placement group. The solution’s UI consists of one HTML page. The HTML file is 1,024 bytes in size. The software processes files larger than 1,024 MB. When requested, it shares files with clients over the network. The files are shared with the Don't Fragment flag enabled. The EC2 instances’ elastic network interfaces are configured for jumbo frames.
The UI is consistently reachable from every permitted source IP address, whether those addresses are in a VPC, on the internet, or on premises. However, clients occasionally do not receive requested files because the files fail to travel successfully from the software to the clients.
Which options could be a root cause of these failures?
- A The source IP addresses are from on-premises hosts that are routed over AWS Direct Connect.
- B The source IP addresses are from on-premises hosts that are routed over AWS Site-to-Site VPN.
- C The source IP addresses are from hosts that connect over the public internet.
- D The security group of the EC2 instances does not allow ICMP traffic.
- E The operating system of the EC2 instances does not support jumbo frames.
Community Discussion