Your security team implements a host-based firewall on all of your Amazon Elastic Compute Cloud (EC2) instances to block all outgoing traffic. Exceptions must be requested for each specific requirement. Until you request a new rule, you cannot access the instance metadata service. Which firewall rule should you request to be added to your instances to allow instance metadata access?
A) Inbound; Protocol tcp; Source [Instance's EIP]; Destination 169.254.169.254
B) Inbound; Protocol tcp; Destination 169.254.169.254; Destination port 80
C) Outbound; Protocol tcp; Destination 169.254.169.254; Destination port 80
D) Outbound; Protocol tcp; Destination 169 .254.169.254; Destination port 443

Question

Quizplus · Accepted Answer

The instance metadata service is accessed via HTTP, which uses TCP port 80. Therefore, an outbound rule allowing TCP traffic to the IP address 169.254.169.254 on port 80 is needed.

Your Security Team Implements a Host-Based Firewall on All of Your