ANS-C01 · Question #88
A network architect is designing an internet website. It has web, application, and database tiers that will run in AWS. The website uses Amazon DynamoDB. Which architecture will minimize public…
The correct answer is B. A VPC with public subnets for the ALB, private subnets for the web tier, and private subnets for. A VPC endpoint for DynamoDB enables Amazon EC2 instances in your VPC to use their private IP addresses to access DynamoDB with no exposure to the public internet. Your EC2 instances do not require public IP addresses, and you don't need an internet gateway, a NAT device, or a…
Question
A network architect is designing an internet website. It has web, application, and database tiers that will run in AWS. The website uses Amazon DynamoDB. Which architecture will minimize public exposure of the back-end instances?
Options
- AA VPC with public subnets for the NLB, public subnets for the web tier, private subnets for the
- BA VPC with public subnets for the ALB, private subnets for the web tier, and private subnets for
- CA VPC with public subnets for the ALB, public subnets for the web tier, private subnets for the
- DA VPC with public subnets for the NLB, private subnets for the web tier, and public subnets for
How the community answered
(34 responses)- A15% (5)
- B71% (24)
- C9% (3)
- D6% (2)
Explanation
A VPC endpoint for DynamoDB enables Amazon EC2 instances in your VPC to use their private IP addresses to access DynamoDB with no exposure to the public internet. Your EC2 instances do not require public IP addresses, and you don't need an internet gateway, a NAT device, or a virtual private gateway in your VPC. https://docs.aws.amazon.com/amazondynamodb/latest/developerguide/vpc-endpoints-
Topics
Community Discussion
No community discussion yet for this question.