QuestionQ17

Cloud-based Architecture Design of Conventional Applications

After a company migrates its workloads to the cloud, multiple cloud servers in a virtual private cloud (VPC) need Internet access. However, the EIPs associated with the cloud servers might be attacked. An engineer suggests adding multiple EIPs when configuring DNAT rules. If one EIP is attacked, the other EIPs can continue to provide services and keep operations running normally.

  • A TRUE
  • B FALSE
Explanation

Multiple EIPs provide attack-related continuity when configured on an SNAT rule, not on a DNAT rule. A server port can have only one DNAT rule, and that port can map to only one EIP, so DNAT cannot provide the stated multiple-EIP failover behavior.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!