Exam AWS Certified Solutions Architect - Associate SAA-C02 All Questions

View all questions & answers for the AWS Certified Solutions Architect - Associate SAA-C02 exam

Exam AWS Certified Solutions Architect - Associate SAA-C02 topic 1 question 152 discussion

Exam question from Amazon's AWS Certified Solutions Architect - Associate SAA-C02

Question #: 152
Topic #: 1

[All AWS Certified Solutions Architect - Associate SAA-C02 Questions]

A company runs an application on Amazon EC2 instances. The application is deployed in private subnets in three Availability Zones of the us-east-1 Region. The instances must be able to connect to the internet to download files. The company wants a design that is highly available across the Region.
Which solution should be implemented to ensure that there are no disruptions to internet connectivity?

A. Deploy a NAT instance in a private subnet of each Availability Zone.
B. Deploy a NAT gateway in a public subnet of each Availability Zone.
C. Deploy a transit gateway in a private subnet of each Availability Zone.
D. Deploy an internet gateway in a public subnet of each Availability Zone.

Show Suggested Answer

Suggested Answer: B 🗳️

by josebormo at Aug. 10, 2020, 3:54 p.m.

Disclaimers:

- ExamTopics website is not related to, affiliated with, endorsed or authorized by Amazon.
- Trademarks, certification & product names are used for reference only and belong to Amazon.

Comments

Submit Cancel

Paitan

Highly Voted 3 years, 8 months ago

NAT gateway in a public subnet of each Availability Zone is the right answer.

upvoted 37 times

DJiang

3 years, 6 months ago

internet gateway would allow connection from internet to private VPC; NAT is one-way connection(VPC to internet). A NAT gateway is a Network Address Translation (NAT) service. You can use a NAT gateway so that instances in a private subnet can connect to services outside your VPC but external services cannot initiate a connection with those instances. https://docs.aws.amazon.com/vpc/latest/userguide/vpc-nat-gateway.html An internet gateway is a horizontally scaled, redundant, and highly available VPC component that allows communication between your VPC and the internet. https://docs.aws.amazon.com/vpc/latest/userguide/VPC_Internet_Gateway.html

upvoted 4 times

...

manan728

3 years, 6 months ago

Similar question was on my test that I passed on Nov 20 2021. I picked B. It was different wordings for the question but same alternatives. Roughly half of the questions are from this 500 examtopics dump. But other half were unheard of new and lengthy ones in my test. Some of those questions had similarities but had twisted options. Good luck ya'll.

upvoted 6 times

...

josebormo

Highly Voted 3 years, 8 months ago

I go with B

upvoted 14 times

...

queen101

Most Recent 2 years, 8 months ago

BBBBBBBBB

upvoted 1 times

...

queen101

2 years, 9 months ago

BBBBBBBBBBB

upvoted 1 times

...

goblin123

3 years, 2 months ago

Selected Answer: B

NAT GW in public subnet is the only option here.

upvoted 1 times

...

naval_atram

3 years, 4 months ago

A company is designing a new application that runs in a VPC on Amazon EC2 instances. The application stores data in Amazon S3 and uses Amazon DynamoDB as its database. For compliance reasons, the company prohibits all traffic between the EC2 instances and other AWS services from passing over the public internet. What can a solutions architect do to meet this requirement? A. Configure gateway VPC endpoints to Amazon S3 and DynamoDB. B. Configure interface VPC endpoints to Amazon S3 and DynamoDB. C. Configure a gateway VPC endpoint to Amazon S3. Configure an interface VPC endpoint to DynamoDB. D. Configure a gateway VPC endpoint to DynamoDB. Configure an interface VPC endpoint to Amazon S3. Which answer is correct C or D and why ? Please can anyone answer this?

upvoted 1 times

petervu

3 years, 4 months ago

I prefer C because it costs less if we configure gateway VPC endpoint to S3.

upvoted 1 times

...

iDiddy

2 years, 12 months ago

A: "Gateway endpoints provide reliable connectivity to Amazon S3 and DynamoDB without requiring an internet gateway or a NAT device for your VPC. Gateway endpoints do not enable AWS PrivateLink. There is no additional charge for using gateway endpoints. Amazon S3 supports both gateway endpoints and interface endpoints."

upvoted 3 times

...

Robert_B

3 years, 4 months ago

Selected Answer: B

B - NAT GW in public

upvoted 1 times

...

jj22222

3 years, 5 months ago

B - Nat Gateway

upvoted 1 times

...

gargaditya

3 years, 6 months ago

NAT instance/GW is used to give internet access to EC2 in private subnets. NAT instance/GW is always in Public Subnet. RT of private subnet contains a route to NAT GW/NAT instance. Choose NAT GW (AWS Managed)over NAT instance if above is satisfied. Answer=B

upvoted 4 times

...

intf_null0

3 years, 7 months ago

B. The question states "application is deployed in private subnets" which requires a NAT GW to provide Internet connectivity. NAT GWs are installed in the public subnet for this purpose.

upvoted 7 times

...