AWS Certified Advanced Networking – Specialty ANS-C00 – Question263

You have a management server that needs to be able to communicate with two subnets. One of these subnets is private. This subnet must remain private and must not pass any traffic back to other subnets.
How would you configure this?

A.
Configure a NACL to allow access from the management server to the private server.
B. Add an ENI to the management server that resides in the subnet of the private server.
C. You can't do this without allowing traffic back through the other subnet.
D. Configure a security group rule to allow access from the management server to the private server.

Correct Answer: B

Explanation:

Explanation:
Add an ENI to the management server that resides in the subnet of the private server. This will allow the management server to communicate with the private server without having to change security rules.