nerdexam
AmazonAmazon

SAA-C03 · Question #436

SAA-C03 Question #436: Real Exam Question with Answer & Explanation

Sign in or unlock SAA-C03 to reveal the answer and full explanation for question #436. The question stem and answer options stay visible for context.

Submitted by dimitri_ru· Mar 4, 2026Design Secure Architectures

Question

A solutions architect is configuring a VPC that has public subnets and private subnets. The VPC and subnets use IPv4 CIDR blocks. There is one public subnet and one private subnet in each of three Availability Zones (AZs). An internet gateway is attached to the VPC. The private subnets require access to the internet to allow Amazon EC2 instances to download software updates. Which solution will meet this requirement?

Options

  • ACreate a NAT gateway in one of the public subnets. Update the route tables that are attached to
  • BCreate three NAT instances in each private subnet. Create a private route table for each
  • CAttach an egress-only internet gateway in the VPC. Update the route tables of the private subnets
  • DCreate a NAT gateway in one of the private subnets. Update the route tables that are attached to

Unlock SAA-C03 to see the answer

You've previewed enough free SAA-C03 questions. Unlock SAA-C03 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.

Full SAA-C03 PracticeBrowse All SAA-C03 Questions