Exam AWS Certified Solutions Architect - Associate SAA-C02 All Questions

View all questions & answers for the AWS Certified Solutions Architect - Associate SAA-C02 exam

Exam AWS Certified Solutions Architect - Associate SAA-C02 topic 1 question 143 discussion

Exam question from Amazon's AWS Certified Solutions Architect - Associate SAA-C02

Question #: 143
Topic #: 1

[All AWS Certified Solutions Architect - Associate SAA-C02 Questions]

A company recently deployed a two-tier application in two Availability Zones in the us-east-1 Region. The databases are deployed in a private subnet while the web servers are deployed in a public subnet. An internet gateway is attached to the VPC. The application and database run on Amazon EC2 instances. The database servers are unable to access patches on the internet. A solutions architect needs to design a solution that maintains database security with the least operational overhead.
Which solution meets these requirements?

A. Deploy a NAT gateway inside the public subnet for each Availability Zone and associate it with an Elastic IP address. Update the routing table of the private subnet to use it as the default route.
B. Deploy a NAT gateway inside the private subnet for each Availability Zone and associate it with an Elastic IP address. Update the routing table of the private subnet to use it as the default route.
C. Deploy two NAT instances inside the public subnet for each Availability Zone and associate them with Elastic IP addresses. Update the routing table of the private subnet to use it as the default route.
D. Deploy two NAT instances inside the private subnet for each Availability Zone and associate them with Elastic IP addresses. Update the routing table of the private subnet to use it as the default route.

Show Suggested Answer

Suggested Answer: A 🗳️

by dfedeli at Aug. 10, 2020, 4:06 a.m.

Disclaimers:

- ExamTopics website is not related to, affiliated with, endorsed or authorized by Amazon.
- Trademarks, certification & product names are used for reference only and belong to Amazon.

Comments

Submit Cancel

dfedeli

Highly Voted 3 years, 8 months ago

Course A

upvoted 61 times

aguy9

3 years, 7 months ago

I agree answer is A

upvoted 4 times

...

noahsark

3 years, 7 months ago

is this looks like letter A's diagram? https://docs.aws.amazon.com/vpc/latest/userguide/images/nat-gateway-diagram.png

upvoted 3 times

...

UpsetUser

3 years, 7 months ago

if NAt g is placed in private subnet,, then that subnet's instances cannot use that NOT g. So normal logic and no tricks in this question, Answer : A

upvoted 7 times

...

Mahesh_11

Highly Voted 3 years, 8 months ago

Ans: A Piece of cake. "least operational overhead". You can use a network address translation (NAT) gateway to enable instances in a private subnet to connect to the internet or other AWS services, but prevent the internet from initiating a connection with those instances

upvoted 29 times

...

ChiefArch

Most Recent 2 years, 9 months ago

Selected Answer: A

On my exam 8/26/22 - ans A

upvoted 2 times

...

queen101

2 years, 9 months ago

AAAAAAAAAA

upvoted 1 times

...

3 years, 4 months ago

Selected Answer: C

For this one, let me choose C. nano instance is merely $0.0057 per hour, or $4.161 per month. With smart purchasing, such as using Reserved Instances, you can even get one for as cheap as $2.75 per month. That's only 7% of the cost of a NAT Gateway. Coz To reduce operational cost.

upvoted 2 times

AmazingAWS

2 years, 9 months ago

It says "operational overhead", not "operational cost" as you mentioned. A is correct.

upvoted 1 times

...

MikeDuB

3 years, 5 months ago

You can tell the answer within the first couple of words of each question. NAT instances are more expensive than NAT Gateways, so that gets rid of C and D, and then NAT Gateways are always placed in the public subnet, so answer is A

upvoted 7 times

...

Milan_S

3 years, 6 months ago

Ans C. Why A and not C ? NAT gateway will cost more than NAT instance as it is a managed component. A gateway has added redundancy for high availability plus the instance size is fixed. whereas you can choose a single small or nano size NAT instance. The condition is to reduce operational cost not operational overhead.

upvoted 1 times

AmazingAWS

2 years, 9 months ago

Are we looking at different web page? The question for me is less operational overhead.. So it's A for me

upvoted 1 times

...

Milan_S

3 years, 6 months ago

Why A and not C ? NAT gateway will cost more than NAT instance as it is a managed component ?

upvoted 1 times

...

Load full discussion...