AWS Certified Advanced Networking Specialty Practice Exam

When you terminate a VPN on an EC2 instance, which is the responsibility of AWS?

1. Managing the user permissions for the instance

2. Managing the security groups attached to the instance

3. Managing the underlying Amazon EC2 host health

4. Managing the application running on the instance

The correct answer is: Managing the underlying Amazon EC2 host health

When a VPN is terminated on an EC2 instance, AWS is responsible for managing the underlying Amazon EC2 host health. This includes ensuring that the physical infrastructure supporting the EC2 instance is running properly and is available. AWS manages the hardware, networking, and other resources necessary to keep the EC2 instance operational. The underlying health of the EC2 host is crucial not only for the availability of the instance but also for the performance of the applications running on it. AWS handles the physical aspect, such as power supply, connectivity, and server maintenance, allowing users to focus on the configuration and management of their instances and applications. While users are responsible for managing user permissions, security groups, and applications running on the instances, these aspects fall under the user’s control rather than AWS’s operational responsibilities. This division of responsibilities is part of the shared responsibility model that AWS employs.