nerdexam
Amazon

SAA-C03 · Question #185

A company is launching a new application that will be hosted on Amazon EC2 instances. A solutions architect needs to design a solution that does not allow public IPv4 access that originates from the i

Sign in or unlock SAA-C03 to reveal the answer and full explanation for question #185. The question stem and answer options stay visible for context.

Submitted by lukas.cz· Mar 4, 2026Design Resilient Architectures

Question

A company is launching a new application that will be hosted on Amazon EC2 instances. A solutions architect needs to design a solution that does not allow public IPv4 access that originates from the internet. However, the solution must allow the EC2 instances to make outbound IPv4 internet requests. The initial design proposal shows that the EC2 instances would be located in two private subnets across two Availability Zones. The entire architecture must be highly available. How should the solutions architect change the architecture to meet these requirements?

Options

  • ADeploy a NAT gateway in public subnets in both Availability Zones. Create and configure one
  • BDeploy an internet gateway in public subnets in both Availability Zones. Create and configure a
  • CDeploy a NAT gateway in public subnets in both Availability Zones. Create and configure a
  • DDeploy an egress-only internet gateway in public subnets in both Availability Zones. Create and

Unlock SAA-C03 to see the answer

You've previewed enough free SAA-C03 questions. Unlock SAA-C03 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.

Full SAA-C03 Practice