ExamTopics Logo
Mail Us[email protected]
Menu
Amazon Discussions
exam questions

Exam AWS-SysOps All Questions

View all questions & answers for the AWS-SysOps exam
Go to Exam

Exam AWS-SysOps topic 1 question 909 discussion

Exam question from Amazon's AWS-SysOps
Question #: 909
Topic #: 1
[All AWS-SysOps Questions]

A security officer has requested that internet access be removed from subnets in a VPC. The subnets currently route internet-bound traffic to a NAT gateway. A
SysOps administrator needs to remove this access while allowing access to Amazon S3.
Which solution will meet these requirements?

  • A. Set up an internet gateway. Update the route table on the subnets to use the internet gateway to route traffic to Amazon S3.
  • B. Set up an S3 VPC gateway endpoint. Update the route table on the subnets to use the gateway endpoint to route traffic to Amazon S3.
  • C. Set up additional NAT gateways in each Availability Zone. Update the route table on the subnets to use the NAT gateways to route traffic to Amazon S3.
  • D. Set up an egress-only internet gateway. Update the route table on the subnets to use the egress-only internet gateway to route traffic to Amazon S3.
Show Suggested Answer Hide Answer
Suggested Answer: C 🗳️
by Drey at May 2, 2021, 12:53 p.m.
Disclaimers:
  • - ExamTopics website is not related to, affiliated with, endorsed or authorized by Amazon.
  • - Trademarks, certification & product names are used for reference only and belong to Amazon.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Submit Cancel
aidenpearce01
9 months ago
Selected Answer: B
Why C, the answer it's B due to S3 it's a services require Endpoint for connect
upvoted 2 times
...
hazemtns
1 year, 1 month ago
Answer : B
upvoted 4 times
...
RicardoD
1 year, 1 month ago
B is the answer
upvoted 1 times
...
Desteeny
1 year, 2 months ago
B. I don't see the role of C here
upvoted 1 times
...
binhdt2611
1 year, 2 months ago
B for sure
upvoted 2 times
...
DoktaDee
1 year, 2 months ago
B. https://docs.aws.amazon.com/vpc/latest/privatelink/vpc-endpoints-s3.html
upvoted 2 times
...
krishna2812
1 year, 2 months ago
B should be the answer
upvoted 3 times
...
Drey
1 year, 2 months ago
You don't need an additional NAT GW. You only need an S3 VPC gateway endpoint.
upvoted 4 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel