An organization is planning to set up a management network on the AWS VPC. The organization is trying to secure the web server on a single EC2 instance such that it allows the internet traffic and back-end management traffic. The organization wants to ensure that the back-end management network interface can only receive SSH traffic from a selected IP range. At the same time, the Internet-facing web server will have an IP address that can receive traffic from all the internet IPs.

Answer options:

A.It is not possible to have 2 IP addresses for a single instance.
B.The organization should create 2 network interfaces, one for the internet traffic and the other for the backend traffic.
C.The organization should create 2 EC2 instances as this is not possible with one EC2 instance.
D.This is not possible.

Answer - B
An Elastic Network Interface (ENI) is a virtual network interface that you can attach to an instance in a VPC. Network interfaces are available only for instances running in a VPC.A network interface can include the following attributes.
A primary private IPv4 address
One or more secondary private IPv4 addresses
One Elastic IP address (IPv4) per private IPv4 address
One public IPv4 address
One or more IPv6 addresses
One or more security groups
A MAC address
A source/destination check flag
A description
See an example below how the route table can be configured to allow the IP based access via multiple ENIs.
For more information on ENI, please refer to the below link.
http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/using-eni.html