PAS-C01 Technology Practice Question
Network Topology
Refer to the exhibit. An administrator runs the AWS CLI command shown and receives the output. The instance is running, but the SAP application on the instance is not accessible. Which additional AWS CLI command should the administrator run to troubleshoot the network connectivity?
⚠ Common exam trap
Many exam-takers choose `describe-security-groups` (Option C) thinking it directly shows the rules, but they forget that without linking the security group to the specific instance's network interface, they cannot confirm which rules are actually applied to that instance, especially when multiple security groups are involved.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
aws ec2 describe-instances --instance-ids i-0abcd1234efgh5678 --query 'Reservations[0].Instances[0].NetworkInterfaces'
The correct command, `describe-instances` with a filter on `NetworkInterfaces`, retrieves the detailed network interface configuration attached to the specific instance, including the subnet ID, security group IDs, and public/private IP addresses. This allows the administrator to verify whether the instance is attached to the correct subnet and security groups, which are the most common causes of network connectivity issues for an SAP application. The other commands either do not filter to the specific instance or do not provide the necessary network interface details to diagnose the problem.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
aws ec2 describe-subnets
Why it's wrong here
This shows subnets but not instance-specific network details.
- ✗
aws ec2 describe-network-interfaces
Why it's wrong here
This shows network interfaces but not specifically for the instance.
- ✗
aws ec2 describe-security-groups
Why it's wrong here
This shows all security groups, not specifically attached to the instance.
- ✓
aws ec2 describe-instances --instance-ids i-0abcd1234efgh5678 --query 'Reservations[0].Instances[0].NetworkInterfaces'
Why this is correct
This query returns network interface details including public IP, security groups, etc.
Visual reference
Go deeper
Related to this question
About these practice questions
One of 1,616 original PAS-C01 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This PAS-C01 practice question is part of Courseiva's free Amazon Web Services certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the PAS-C01 exam.