A security officer has requested Ifial internet access be removed from subnets in a VPC.

Question

A security officer has requested Ifial internet access be removed from subnets in a VPC. The subnets currently route internet-bound traffic to a NAT gateway. A SysOps administrator needs to remove this access while allowing access to Amazon S3.
Which solution will meet these requirements?

Accepted Answer

B. Set up an S3 VPC gateway endpoint. Update the route table on the subnets to use the gateway endpoint to route traffic to Amazon S3.

Answer

A. Set up an internet gateway. Update the route table on the subnets to use the internet gateway to route traffic to Amazon S3

Answer

C. Set up additional NAT gateways in each Availability Zone. Update the route table on the subnets to use the NAT gateways to route traffic to Amazon S3.

Answer

D. Set up an egress-only internet gateway. Update the route table on the subnets to use the egress-only internet gateway to route traffic to Amazon S3.

Summer Sale Limited Time 65% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: pass65

Exam SOA-C01 All Questions

Amazon Web Services AWS Certified Associate SOA-C01 Question # 2 Topic 1 Discussion

Correct Answer:

Options Selected by Other Users:

Contribute your Thoughts: