nerdexam
AmazonAmazon

SAA-C03 · Question #193

SAA-C03 Question #193: Real Exam Question with Answer & Explanation

Sign in or unlock SAA-C03 to reveal the answer and full explanation for question #193. The question stem and answer options stay visible for context.

Submitted by minji_kr· Mar 4, 2026Design Secure Architectures

Question

A solutions architect is designing the network architecture for an application that runs on Amazon EC2 instances in an Auto Scaling group. The application needs to access data that is in Amazon S3 buckets. Traffic to the S3 buckets must not use public IP addresses. The solutions architect will deploy the application in a VPC that has public and private subnets. Which solutions will meet these requirements? (Select TWO.)

Options

  • ADeploy the EC2 instances in a private subnet. Configure a default route to an egress-only internet
  • BDeploy the EC2 instances in a public subnet. Create a gateway endpoint for Amazon S3.
  • CDeploy the EC2 instances in a public subnet. Create an interface endpoint for Amazon S3.
  • DDeploy the EC2 instances in a private subnet. Configure a default route to a NAT gateway in a
  • EDeploy the EC2 instances in a private subnet. Configure a default route to a customer gateway.

Unlock SAA-C03 to see the answer

You've previewed enough free SAA-C03 questions. Unlock SAA-C03 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.

Full SAA-C03 PracticeBrowse All SAA-C03 Questions