Q30 — AWS SAA-C03 Ch.6

Question 30 of 65 | ← Chapter 6

Q395. A company has applications hosted on Amazon EC2 instances with IPv6 addresses. The applications must initiate communications with other external applications using the internet. However, the company's security policy states that any external service cannot initiate a connection to the EC2 instances. What should a solutions architect recommend to resolve this issue?

• A. Create a NAT gateway and make it the destination of the subnet's route table
• B. Create an internet gateway and make it the destination of the subnet's route table
• C. Create a virtual private gateway and make it the destination of the subnet's route table
• D. Create an egress-only internet gateway and make it the destination of the subnet's route table ✓

Correct Answer: D. Create an egress-only internet gateway and make it the destination of the subnet's route table

Explanation

By creating an egress-only internet gateway and making it the destination of the subnet's route table, the EC2 instances will be able to initiate outbound connections to external applications using the internet. However, the external applications will not be able to initiate inbound connections to the EC2 instances, as per the company's security policy.