nerdexam
Amazon

SCS-C02 · Question #367

There is a set of Ec2 Instances in a private subnet. The application hosted on these EC2 Instances need to access a DynamoDB table. It needs to be ensured that traffic does not flow out to the…

The correct answer is A. Use a VPC endpoint to the DynamoDB table. The following diagram from the AWS Documentation shows how you can access the DynamoDB service from within a V without going to the Internet This can be done with the help of a VPC Option B is invalid because this is used for connection between an on-premise solution and AWS…

Submitted by valeria.br· Mar 6, 2026Infrastructure Security

Question

There is a set of Ec2 Instances in a private subnet. The application hosted on these EC2 Instances need to access a DynamoDB table. It needs to be ensured that traffic does not flow out to the internet. How can this be achieved?

Exhibit

SCS-C02 question #367 exhibit

Options

  • AUse a VPC endpoint to the DynamoDB table
  • BUse a VPN connection from the VPC
  • CUse a VPC gateway from the VPC
  • DUse a VPC Peering connection to the DynamoDB table

How the community answered

(15 responses)
  • A
    80% (12)
  • B
    7% (1)
  • C
    13% (2)

Explanation

The following diagram from the AWS Documentation shows how you can access the DynamoDB service from within a V without going to the Internet This can be done with the help of a VPC Option B is invalid because this is used for connection between an on-premise solution and AWS Option C is invalid because there is no such option Option D is invalid because this is used to connect 2 VPCs

Topics

#VPC endpoint#DynamoDB#private subnet#network isolation

Community Discussion

No community discussion yet for this question.

Full SCS-C02 Practice