You are tasked with setting up a Linux bastion host for access to Amazon EC2 instances running in your VPC.
Only clients connecting from the corporate external public IP address 72.34.51.100 should have SSH access to
the host. Which option will meet the customer requirement?
A.
Security Group Inbound Rule: Protocol – TCP. Port Range – 22, Source 72.34.51.100/32
B.
Security Group Inbound Rule: Protocol – UDP, Port Range – 22, Source 72.34.51.100/32
C.
Network ACL Inbound Rule: Protocol – UDP, Port Range – 22, Source 72.34.51.100/32
D.
Network ACL Inbound Rule: Protocol – TCP, Port Range-22, Source 72.34.51.100/0
B. Incorrect – UDP is not the right protocol.
C. Incorrect – UDP is not the right protocol.
D. Incorrect – /0 is not the correct CIDR notation for a single IP address.
Agreed, A is correct.
A