nerdexam
AmazonAmazon

SAA-C03 · Question #771

SAA-C03 Question #771: Real Exam Question with Answer & Explanation

The correct answer is A: Create an internet gateway. Attach the internet gateway to the VPC.. To allow an EC2 instance to communicate with the internet, the VPC must have an internet gateway attached, and the subnet’s route table must have a route directing outbound traffic (0.0.0.0/0) to the internet gateway. This enables the instance with an Elastic IP to send and recei

Submitted by anjalisingh· Mar 4, 2026Design Secure Architectures

Question

A solutions architect launches an Amazon EC2 instance inside a new VPC. The solutions architect configures network ACL rules and security group rules that allow the appropriate traffic to flow to and from the instance. An Elastic IP address is associated with the instance. The solutions architect needs to be able to access the instance from the internet. Which combination of actions should the solutions architect take to accomplish this goal? (Choose two.)

Options

  • ACreate an internet gateway. Attach the internet gateway to the VPC.
  • BCreate an internet gateway. Attach the internet gateway to the instance's subnet.
  • CCreate an internet gateway. Attach the internet gateway to the instance.
  • DAdd a route to the route table of the instance's subnet. Route traffic from the instance's subnet to
  • EAdd a route to the route table of the instance's subnet. Route traffic from the internet gateway to

Explanation

To allow an EC2 instance to communicate with the internet, the VPC must have an internet gateway attached, and the subnet’s route table must have a route directing outbound traffic (0.0.0.0/0) to the internet gateway. This enables the instance with an Elastic IP to send and receive traffic from the internet.

Community Discussion

No community discussion yet for this question.

Full SAA-C03 PracticeBrowse All SAA-C03 Questions