🔥 40% Off Crucial Exams Memberships — This Week Only

2 days, 11 hours remaining!
Crucial Exams

ISC2 Systems Security Certified Practitioner (SSCP) Practice Question

A security engineer must allow a strategic partner to access an internal reporting application that is currently deployed in the company's AWS environment. The partner's on-premises network is connected to AWS through a site-to-site VPN. Management insists that the application remain isolated from the public Internet but also be segregated from the corporate intranet. Which solution BEST meets the requirement for creating an extranet zone?

  • Create a separate VPC that contains only the reporting application, attach it to the existing site-to-site VPN and a transit gateway for selective routing to the partner, and omit an Internet gateway so the VPC is reachable solely through the VPN.

  • Convert the application to a SaaS offering in AWS Marketplace and have the partner subscribe to it using their own AWS accounts.

  • Publish the application through AWS PrivateLink from the production VPC and allow the partner to reach it over the Internet by whitelisting their public IP addresses.

  • Deploy the application in a public subnet behind an internet-facing Application Load Balancer secured with AWS WAF, and require the partner to authenticate with multi-factor authentication.

ISC2 Systems Security Certified Practitioner (SSCP)
Access Controls
Your Score:
Settings & Objectives
Random Mixed
Questions are selected randomly from all chosen topics, with a preference for those you haven’t seen before. You may see several questions from the same objective or domain in a row.
Rotate by Objective
Questions cycle through each objective or domain in turn, helping you avoid long streaks of questions from the same area. You may see some repeat questions, but the distribution will be more balanced across topics.

Check or uncheck an objective to set which questions you will receive.

Wipe Score
Bash, the Crucial Exams Chat Bot
AI Bot