nerdexam
AmazonAmazon

DBS-C01 · Question #359

DBS-C01 Question #359: Real Exam Question with Answer & Explanation

Sign in or unlock DBS-C01 to reveal the answer and full explanation for question #359. The question stem and answer options stay visible for context.

Submitted by miguelv· Mar 6, 2026Database Security

Question

A company has a hybrid environment in which a VPC connects to an on-premises network through an AWS Site-to-Site VPN connection. The VPC contains an application that is hosted on Amazon EC2 instances. The EC2 instances run in private subnets behind an Application Load Balancer (ALB) that is associated with multiple public subnets. The EC2 instances need to securely access an Amazon DynamoDB table. Which solution will meet these requirements?

Options

  • AUse the internet gateway of the VPC to access the DynamoDB table. Use the ALB to route the
  • BAdd a NAT gateway in one of the public subnets of the VPC. Configure the security groups of the
  • CUse the Site-to-Site VPN connection to route all DynamoDB network traffic through the on-
  • DCreate a VPC endpoint for DynamoDB. Assign the endpoint to the route table of the private

Unlock DBS-C01 to see the answer

You've previewed enough free DBS-C01 questions. Unlock DBS-C01 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.

Topics

#DynamoDB#VPC endpoints#private subnets#network security
Full DBS-C01 PracticeBrowse All DBS-C01 Questions