AWS Solution Architect Associate Exam Dumps

You are designing an intrusion detection prevention (IDS/IPS) solution for a customer web application in a single VPC. You are considering the options for implementing IOS IPS protection for traffic coming from the Internet.

Which of the following options would you consider? (Choose 2 answers)

A. Implement a reverse proxy layer in front of web servers and configure IDS/IPS agents on each            reverse proxy server.
B. Implement IDS/IPS agents on each Instance running In VPC
C. Implement Elastic Load Balancing with SSL listeners In front of the web applications
D. Configure an instance in each subnet to switch its network interface card to promiscuous mode            and analyze network traffic.

Answer : C , A