nerdexam
Amazon

ANS-C01 · Question #156

A company needs to temporarily scale out capacity for an on-premises application and wants to deploy new servers on Amazon EC2 instances. A network engineer must design the networking solution for…

The correct answer is B. Create a VPC that has private subnets. Create a customer gateway, a virtual private gateway. You don't need to a private subnet as you should only be able to get to the instances from on prem, also you don't need a public subnet with a nat gateway as internet traffic goes through on

Submitted by carlos_mx· Mar 6, 2026Design and Implement Hybrid Connectivity

Question

A company needs to temporarily scale out capacity for an on-premises application and wants to deploy new servers on Amazon EC2 instances. A network engineer must design the networking solution for the connectivity and for the application on AWS. The EC2 instances need to share data with the existing servers in the on-premises data center. The servers must not be accessible from the internet. All traffic to the internet must route through the firewall in the on-premises data center. The servers must be able to access a third-party web application. Which configuration will meet these requirements?

Options

  • ACreate a VPC that has public subnets and private subnets. Create a customer gateway, a virtual
  • BCreate a VPC that has private subnets. Create a customer gateway, a virtual private gateway,
  • CCreate a VPC that has public subnets. Create a customer gateway, a virtual private gateway, and
  • DCreate a VPC that has public subnets and private subnets. Create a customer gateway, a virtual

How the community answered

(20 responses)
  • A
    5% (1)
  • B
    65% (13)
  • C
    20% (4)
  • D
    10% (2)

Explanation

You don't need to a private subnet as you should only be able to get to the instances from on prem, also you don't need a public subnet with a nat gateway as internet traffic goes through on

Topics

#AWS Site-to-Site VPN#VPC Private Subnets#Custom Route Tables#Hybrid Cloud Connectivity

Community Discussion

No community discussion yet for this question.

Full ANS-C01 Practice