An organization is planning to set up a management network on the AWS VPC. The organization is trying to secure the web server on a single EC2 instance of VPC such that it allows internet traffic and back-end management traffic. The organization wants to make it so that the back-end management network interface can only receive SSH traffic from a selected IP range. At the same time, the internet-facing web server will have an IP address that can receive traffic from all the internet IPs.
How can the organization achieve this by running a web server on a single instance?
 

Answer options:

A.It is not possible to have 2 IP addresses for a single instance.
B.The organization should create 2 network interfaces, one for the internet traffic and the other for the backend traffic.
C.The organization should create 2 EC2 instances as this is not possible with one EC2 instance.
D.This is not possible.

Answer – B
You can attach 2 ENI’s to the Instance. One ENI can be used to accept Internet traffic and the other can be used to interact with your instances in the private subnet.
Options A and D are invalid because a solution is possible.
Option C is incorrect because you should have 2 Elastic Network Interfaces and not 2 EC2 Instances.
For more information on Elastic Network Interfaces, please visit the below URL:
https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/using-eni.html