SOA-C03 · Question #170
A company moves workloads from public subnets to private subnets to improve security. During testing, servers in the private subnets cannot reach an external API. The VPC has a CIDR block of 10.0.0.0/
Sign in or unlock SOA-C03 to reveal the answer and full explanation for question #170. The question stem and answer options stay visible for context.
Question
A company moves workloads from public subnets to private subnets to improve security. During testing, servers in the private subnets cannot reach an external API. The VPC has a CIDR block of 10.0.0.0/16, two public subnets, two private subnets, one internet gateway, and a NAT gateway in each private subnet. The company must ensure that workloads in the private subnets can reach the external API. Which solution will meet this requirement?
Options
- ADeploy an outbound-only internet gateway and update route tables.
- BCreate an Amazon API Gateway HTTP API as a proxy.
- CDeploy a NAT gateway in each public subnet and update private subnet route tables.
- DCreate a VPC interface endpoint and update route tables.
Unlock SOA-C03 to see the answer
You've previewed enough free SOA-C03 questions. Unlock SOA-C03 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.