nerdexam
AmazonAmazon

SAA-C03 · Question #809

SAA-C03 Question #809: Real Exam Question with Answer & Explanation

Sign in or unlock SAA-C03 to reveal the answer and full explanation for question #809. The question stem and answer options stay visible for context.

Submitted by jaden.t· Mar 4, 2026Design Secure Architectures

Question

A company wants to use AWS Systems Manager to manage a fleet of Amazon EC2 instances. According to the company's security requirements, no EC2 instances can have internet access. A solutions architect needs to design network connectivity from the EC2 instances to Systems Manager while fulfilling this security obligation. Which solution will meet these requirements?

Options

  • ADeploy the EC2 instances into a private subnet with no route to the internet.
  • BConfigure an interface VPC endpoint for Systems Manager. Update routes to use the endpoint.
  • CDeploy a NAT gateway into a public subnet. Configure private subnets with a default route to the
  • DDeploy an internet gateway. Configure a network ACL to deny traffic to all destinations except

Unlock SAA-C03 to see the answer

You've previewed enough free SAA-C03 questions. Unlock SAA-C03 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.

Full SAA-C03 PracticeBrowse All SAA-C03 Questions