A company plans to deploy a two-tier web application to a new VPC in a single AWS Region. The company has con¦

Question

A company plans to deploy a two-tier web application to a new VPC in a single AWS Region. The company has con¦gured the VPC with an internet
Gateway and four subnets. Two of the subnets are public and have default routes that point to the internet gateway. Two of the subnets are private
And share a route table that does not have a default route.
The application will run on a set of Amazon EC2 instances that will be deployed behind an external Application Load Balancer. The EC2 instances
Must not be directly accessible from the internet. The application will use an Amazon S3 bucket in the same Region to store data. The application
Will invoke S3 GET API operations and S3 PUT API operations from the EC2 instances. A network engineer must design a VPC architecture that
Minimizes data transfer cost.
Which solution will meet these requirements?

Accepted Answer

C. Deploy the EC2 instances in the private subnets. Create an S3 gateway endpoint in the VPSpecify die route table of the private subnets During endpoint creation to create routes to Amazon S3.

Answer

A. Deploy the EC2 instances in the public subnets. Create an S3 interface endpoint in the VPC. Modify the application con¦guration to use the S3 endpoint-speci¦c DNS hostname.

Answer

B. Deploy the EC2 instances in the private subnets. Create a NAT gateway in the VPC. Create default routes in the private subnets to the NAT Gateway. Connect to Amazon S3 by using the NAT gateway.

Answer

D. Deploy the EC2 instances in the private subnets. Create an S3 interface endpoint in the VPC. Modify the application con¦guration to use the S3 endpoint-speci¦c DNS hostname.

Q64 — AWS ANS-C01 Ch.1

Correct Answer: C. Deploy the EC2 instances in the private subnets. Create an S3 gateway endpoint in the VPSpecify die route table of the private subnets During endpoint creation to create routes to Amazon S3.

Explanation