SAP-C02 · Question #206
SAP-C02 Question #206: Real Exam Question with Answer & Explanation
Sign in or unlock SAP-C02 to reveal the answer and full explanation for question #206. The question stem and answer options stay visible for context.
Question
A company is running an application in the AWS Cloud. The application consists of microservices that run on a fleet of Amazon EC2 instances in multiple Availability Zones behind an Application Load Balancer. The company recently added a new REST API that was implemented in Amazon API Gateway. Some of the older microservices that run on EC2 instances need to call this new API. The company does not want the API to be accessible from the public internet and does not want proprietary data to traverse the public internet. What should a solutions architect do to meet these requirements?
Options
- ACreate an AWS Site-to-Site VPN connection between the VPC and the API Gateway. Use API
- BCreate an interface VPC endpoint for API Gateway, and set an endpoint policy to only allow
- CModify the API Gateway to use IAM authentication Update the IAM policy for the IAM role that is
- DCreate an accelerator in AWS Global Accelerator, and connect the accelerator to the API
Unlock SAP-C02 to see the answer
You've previewed enough free SAP-C02 questions. Unlock SAP-C02 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.