nerdexam
Amazon

ANS-C01 · Question #60

A company recently migrated its Amazon EC2 instances to VPC private subnets to satisfy a security compliance requirement. The EC2 instances now use a NAT gateway for internet access. After the migrati

Sign in or unlock ANS-C01 to reveal the answer and full explanation for question #60. The question stem and answer options stay visible for context.

Submitted by hans_de· Mar 6, 2026

Question

A company recently migrated its Amazon EC2 instances to VPC private subnets to satisfy a security compliance requirement. The EC2 instances now use a NAT gateway for internet access. After the migration, some long-running database queries from private EC2 instances to a publicly accessible third-party database no longer receive responses. The database query logs reveal that the queries successfully completed after 7 minutes but that the client EC2 instances never received the response. Which configuration change should a network engineer implement to resolve this issue?

Options

  • AConfigure the NAT gateway timeout to allow connections for up to 600 seconds.
  • BEnable enhanced networking on the client EC2 instances.
  • CEnable TCP keepalive on the client EC2 instances with a value of less than 300 seconds.
  • DClose idle TCP connections through the NAT gateway.

Unlock ANS-C01 to see the answer

You've previewed enough free ANS-C01 questions. Unlock ANS-C01 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.

Topics

#NAT Gateway#TCP Keepalive#Network Troubleshooting#Idle Timeout
Full ANS-C01 Practice