FCP – FortiWAN and Cloud Security Administrator 7.4 — Question 33

You need to deploy a new Windows server in AWS to offload web traffic from an existing web server in a different availability zone.
According to the AWS shared responsibility model, what three actions must you take to secure the new EC2 instance? (Choose three.)

Answer options

• A. Update software on the instance.
• B. Change the existing elastic load balancer (ELB) to a gateway load balancer (GWLB).
• C. Configure security groups.
• D. Manage the operating system on the instance.
• E. Move all web servers into the same availability zone.

Correct answer: A, C, D

Explanation

The correct actions to secure the new EC2 instance include updating software on the instance to patch vulnerabilities, configuring security groups to control inbound and outbound traffic, and managing the operating system to ensure it is secure and maintained. Changing the ELB type is not directly related to securing the instance, while moving servers to the same availability zone does not enhance the security of the new deployment.