nerdexam
AmazonAmazon

SCS-C02 · Question #406

SCS-C02 Question #406: Real Exam Question with Answer & Explanation

Sign in or unlock SCS-C02 to reveal the answer and full explanation for question #406. The question stem and answer options stay visible for context.

Submitted by miguelv· Mar 6, 2026

Question

You have an Amazon VPC that has a private subnet and a public subnet in which you have a NAT instance server. You have created a group of EC2 instances that configure themselves at startup by downloading a bootstrapping script from S3 that deploys an application via GIT. Which one of the following setups would give us the highest level of security? Choose the correct answer from the options given below.

Options

  • AEC2 instances in our public subnet, no EIPs, route outgoing traffic via the IGW
  • BEC2 instances in our public subnet, assigned EIPs, and route outgoing traffic via the NAT
  • CEC2 instance in our private subnet, assigned EIPs, and route our outgoing traffic via our IGW
  • DEC2 instances in our private subnet, no EIPs, route outgoing traffic via the NAT

Unlock SCS-C02 to see the answer

You've previewed enough free SCS-C02 questions. Unlock SCS-C02 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.

Full SCS-C02 PracticeBrowse All SCS-C02 Questions