SAA-C03 · Question #215
A company hosts an Amazon EC2 instance in a private subnet in a new VPC. The VPC also has a public subnet that has the default route set to an internet gateway. The private subnet does not have outbou
Sign in or unlock SAA-C03 to reveal the answer and full explanation for question #215. The question stem and answer options stay visible for context.
Question
A company hosts an Amazon EC2 instance in a private subnet in a new VPC. The VPC also has a public subnet that has the default route set to an internet gateway. The private subnet does not have outbound internet access. The EC2 instance needs to have the ability to download monthly security updates from an outside vendor. However, the company must block any connections that are initiated from the internet. Which solution will meet these requirements?
Options
- AConfigure the private subnet route table to use the internet gateway as the default route.
- BCreate a NAT gateway in the public subnet. Configure the private subnet route table to use the
- CCreate a NAT instance in the private subnet. Configure the private subnet route table to use the
- DCreate a NAT instance in the private subnet. Configure the private subnet route table to use the
Unlock SAA-C03 to see the answer
You've previewed enough free SAA-C03 questions. Unlock SAA-C03 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.