An organization is planning to setup a management network on the AWS VPC. The organization is trying to secure the webserver on a single VPC instance such that it allows the internet traffic as well as the back-end management traffic. The organization wants to make so that the back end management network interface can receive the SSH traffic only from a selected IP range, while the internet facing webserver will have an IP address which can receive traffic from all the internet IPs.
How can the organization achieve this by running web server on a single instance?

Answer options:

A.It is not possible to have 2 IP addresses for a single instance
B.The organization should create 2 network interfaces , one for the internet traffic and the other for the backend traffic
C.The organization should create 2 EC2 instances as this is not possible with one EC2 instance
D.This is not possible

Answer - B
An elastic network interface (referred to as a network interface in this documentation) is a virtual network interface that you can attach to an instance in a VPC. Network interfaces are available only for instances running in a VPC.A network interface can include the following attributes:
· A primary private IPv4 address
· One or more secondary private IPv4 addresses
· One Elastic IP address (IPv4) per private IPv4 address
· One public IPv4 address
· One or more IPv6 addresses
· One or more security groups
· A MAC address
· A source/destination check flag
· A description
For more information on ENI , please refer to the below link:
http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/using-eni.html