nerdexam
Amazon

SAP-C02 · Question #53

An AWS customer has a web application that runs on premises. The web application fetches data from a third-party API that is behind a firewall. The third party accepts only one public CIDR block in…

The correct answer is B. Register a block of customer-owned public IP addresses in the AWS account. Create Elastic IP. When EC2 instances reach third-party API through internet, their privates IP addresses will be masked by NAT Gateway public IP address. https://aws.amazon.com/blogs/networking-and-content-delivery/introducing-bring-your-own-ip- byoip-for-amazon-vpc/

Submitted by jordan8· Mar 6, 2026Migrate Workloads and Modernize Solutions

Question

An AWS customer has a web application that runs on premises. The web application fetches data from a third-party API that is behind a firewall. The third party accepts only one public CIDR block in each client's allow list. The customer wants to migrate their web application to the AWS Cloud. The application will be hosted on a set of Amazon EC2 instances behind an Application Load Balancer (ALB) in a VPC. The ALB is located in public subnets. The EC2 instances are located in private subnets. NAT gateways provide internet access to the private subnets. How should a solutions architect ensure that the web application can continue to call the third- parly API after the migration?

Options

  • AAssociate a block of customer-owned public IP addresses to the VPC. Enable public IP
  • BRegister a block of customer-owned public IP addresses in the AWS account. Create Elastic IP
  • CCreate Elastic IP addresses from the block of customer-owned IP addresses. Assign the static
  • DRegister a block of customer-owned public IP addresses in the AWS account. Set up AWS Global

How the community answered

(22 responses)
  • A
    5% (1)
  • B
    68% (15)
  • C
    9% (2)
  • D
    18% (4)

Explanation

When EC2 instances reach third-party API through internet, their privates IP addresses will be masked by NAT Gateway public IP address. https://aws.amazon.com/blogs/networking-and-content-delivery/introducing-bring-your-own-ip- byoip-for-amazon-vpc/

Community Discussion

No community discussion yet for this question.

Full SAP-C02 Practice