1answer.
Ask question
Login Signup
Ask question
All categories
  • English
  • Mathematics
  • Social Studies
  • Business
  • History
  • Health
  • Geography
  • Biology
  • Physics
  • Chemistry
  • Computers and Technology
  • Arts
  • World Languages
  • Spanish
  • French
  • German
  • Advanced Placement (AP)
  • SAT
  • Medicine
  • Law
  • Engineering
taurus [48]
3 years ago
12

A security review has flagged this architecture as vulnerable, and a Security Engineer has been asked to make this design more s

ecure. The company has a short deadline and a second VPN connection to the Aurora account is not possible.
How can a Security Engineer securely set up the bastion host?
A. Move the bastion host to the VPC and VPN connectivity. Create a VPC peering relationship between the bastion host VPC and Aurora VPC.
B. Create a SSH port forwarding tunnel on the Developer's workstation to the bastion host to ensure that only authorized SSH clients can access the bastion host.
C. Move the bastion host to the VPC with VPN connectivity. Create a cross-account trust relationship between the bastion VPC and Aurora VPC, and update the Aurora security group for the relationship.
D. Create an AWS Direct Connect connection between the corporate network and the Aurora account, and adjust the Aurora security group for this connection.

Physics
1 answer:
dybincka [34]3 years ago
6 0

Answer:

Complete Question:

A company has two AWS accounts, each containing one VPC. The first VPC has a VPN connection with its corporate network. The second VPC, without a VPN, hosts an Amazon Aurora database cluster in private subnets. Developers manage the Aurora database from a bastion host in a public subnet as shown in the image.

A security review has flagged this architecture as vulnerable, and a Security Engineer has been asked to make this design more secure. The company has a short deadline and a second VPN connection to the Aurora account is not possible.

How can a Security Engineer securely set up the bastion host?

A. Move the bastion host to the VPC and VPN connectivity. Create a VPC peering relationship between the bastion host VPC and Aurora VPC.

B. Create a SSH port forwarding tunnel on the Developer's workstation to the bastion host to ensure that only authorized SSH clients can access the bastion host.

C. Move the bastion host to the VPC with VPN connectivity. Create a cross-account trust relationship between the bastion VPC and Aurora VPC, and update the Aurora security group for the relationship.

D. Create an AWS Direct Connect connection between the corporate network and the Aurora account, and adjust the Aurora security group for this connection.

Answer:

B. Create an SSH port forwarding tunnel on the Developer's workstation to the bastion host to ensure that only authorized SSH clients can access the bastion host.

Explanation:

To gain a better understanding of why the option selected in the answer to the question let first explain some terms.

AWS:

According to techtarget,

AWS (Amazon Web Services) is a comprehensive, evolving cloud computing platform provided by Amazon that includes a mixture of (1) infrastructure as a service (IaaS),(2) platform as a service (PaaS) and (3)packaged software as a service (SaaS) offerings.

An AWS account is a container for your AWS resources

A bastion host is a server whose purpose is to provide access to a private network from an external network, such as the Internet. Because of its exposure to potential attacks, a bastion host must minimize the chances of penetration to the private network.

SSH port forwarding, or TCP/IP connection tunneling, is a process whereby a TCP/IP connection that would otherwise be insecure is tunneled through a secure SSH(Secure Shell (SSH) is a cryptographic network protocol for operating network services securely over an unsecured network.) link, thus protecting the tunneled connection from network attacks.

So the Bastion protects the private network while the SSH prevent unauthorized access to the bastion

You might be interested in
Optical tweezers use light from a laser to move single atoms and molecules around. Suppose the intensity of light from the tweez
WITCHER [35]

Answer:

Explanation:

a )

If it is totally absorbed pressure is calculated as follows .

Pressure = I / c where I is intensity of light falling .

= 1000 / 3 x 10⁸

= 3.33 x 10⁻⁶ N / m²

b ) weight of tritium atom

=  3 x 1.67 x 10⁻²⁷ kg

acceleration = force / mass

=    3.33x 10⁻⁶ / 3 x 1.67 x 10⁻²⁷

= .6646 x 10²¹ m /s²

= 66.46 x 10¹⁹ m / s²

7 0
3 years ago
An electric motor rotating a workshop grinding wheel at 1.06 102 rev/min is switched off. Assume the wheel has a constant negati
kvasek [131]

Answer:

t = 106π / 30*2.1

Explanation:

w_{i} = 1.06*10^{2}    => 106

    => 106 x 2π/60

    => 106/30π

∝ = -2.1 rad/sec²

w_{f} => 0

w_{f} = w_{i} + ∝t

∴ (w_{f} - w_{i}) / ∝ = t

t = 106π / 30*2.1

6 0
3 years ago
Which kinds of objects emit visible light in the electromagnetic spectrum?
Triss [41]

Answer : Relatively hot objects

Explanation : We know that, the temperature of the objects is inversely proportional to their wavelengths. The objects emitting radiation in the visible region have short wavelength and hence are relatively hotter.

We know the range of wavelength of the visible spectrum is from 400 nm to 780 nm.





3 0
3 years ago
Read 2 more answers
If a charge at 60c flow in a conductor for 30 second then the current that flow in a conductor is​
saw5 [17]

Explanation:

<h3>Given</h3>

- Charge = 60c

time = 30 sec

<h3>To find -</h3>

current

<h3>Solution </h3>

Current = Charge/time

I = V/T

I = 60/30

I = 2 ampere

More to know -

I = Current

V = Charge

T = Time

3 0
3 years ago
Dimensionally, which of the following could be a velocity? *
astra-53 [7]

Answer:

5 meters per second

Explanation:

5m is the distance

5m west is the vector

5m per second is the velocity

5m per second west is unknown

5 0
3 years ago
Other questions:
  • Which of the following best describes a plane?
    10·2 answers
  • Suppose you ride your bike to the library traveling at 0.5 km/min. It takes you 25 minutes to get to the library. How far did yo
    5·2 answers
  • A 2.5 kg mass starts from rest at point A and moves along the x-axis subject to the potential energy shine in the figure below
    12·1 answer
  • Which of the following statements are true concerning a stable nucleus?Check all that apply..There is a limit to the size of a s
    11·1 answer
  • Scientists use laser range-finding to measure the distance to the moon with great accuracy. A brief laser pulse is fired at the
    11·1 answer
  • A 10-μF capacitor in an LC circuit made entirely of superconducting materials ( R = 0 Ω ) is charged to 100 μC. Then a supercond
    6·1 answer
  • A car traveled 60km in 45 min.What is the cars average speed in km/hr
    10·1 answer
  • A string roller of scissors is an example of both lever and wedge​
    11·1 answer
  • Momentum is conserved it can be transferred but not lost. true or false​
    12·1 answer
  • Convert: 8 mm: ____________ cm
    14·1 answer
Add answer
Login
Not registered? Fast signup
Signup
Login Signup
Ask question!