SAA-C03 Question #656: Real Exam Question with Answer & Explanation

Question

A company is building a static website on AWS in a single VPC. The VPC has public subnets and private subnets in two Availability Zones. The company stores the website content in an Amazon S3 bucket. The company has deployed a fleet of Amazon EC2 instances as web servers in a private subnet. The EC2 instances are in an Auto Scaling group behind an Application Load Balancer (ALB). The EC2 instances serve network traffic and pull content from the S3 bucket to render the webpages. The company is using an AWS Direct Connect connection with a public virtual interface (VIF) to provide on-premises connectivity to the S3 bucket. Network traffic between the EC2 instances and the S3 bucket travels through a NAT gateway. A solutions architect must reconfigure network connectivity to optimize the cost of NAT gateway traffic between the EC2 instances and the S3 bucket. Which solution will meet these requirements?

Options

• ACreate a Direct Connect private VIF. Migrate the traffic from the public VIF to the private VIF.
• BCreate an AWS Site-to-Site VPN tunnel over the existing public VIF.
• CImplement interface VPC endpoints for the S3 bucket Update the VPC route table.
• DImplement gateway VPC endpoints for the S3 bucket. Update the VPC route table.