nerdexam
AmazonAmazon

ANS-C01 · Question #156

ANS-C01 Question #156: Real Exam Question with Answer & Explanation

The correct answer is B: Create a VPC that has private subnets. Create a customer gateway, a virtual private gateway,. You don't need to a private subnet as you should only be able to get to the instances from on prem, also you don't need a public subnet with a nat gateway as internet traffic goes through on

Submitted by carlos_mx· Mar 6, 2026Design and Implement Hybrid Connectivity

Question

A company needs to temporarily scale out capacity for an on-premises application and wants to deploy new servers on Amazon EC2 instances. A network engineer must design the networking solution for the connectivity and for the application on AWS. The EC2 instances need to share data with the existing servers in the on-premises data center. The servers must not be accessible from the internet. All traffic to the internet must route through the firewall in the on-premises data center. The servers must be able to access a third-party web application. Which configuration will meet these requirements?

Options

  • ACreate a VPC that has public subnets and private subnets. Create a customer gateway, a virtual
  • BCreate a VPC that has private subnets. Create a customer gateway, a virtual private gateway,
  • CCreate a VPC that has public subnets. Create a customer gateway, a virtual private gateway, and
  • DCreate a VPC that has public subnets and private subnets. Create a customer gateway, a virtual

Explanation

You don't need to a private subnet as you should only be able to get to the instances from on prem, also you don't need a public subnet with a nat gateway as internet traffic goes through on

Topics

#AWS Site-to-Site VPN#VPC Private Subnets#Custom Route Tables#Hybrid Cloud Connectivity

Community Discussion

No community discussion yet for this question.

Full ANS-C01 PracticeBrowse All ANS-C01 Questions