Q39 — AWS SAA-C03 Ch.6

Question 39 of 65 | ← Chapter 6

Q404. A solutions architect launches an Amazon EC2 instance inside a new VPC. The solutions architect configures network ACL rules and security group rules that allow the appropriate traffic to flow to and from the instance. An Elastic IP address is associated with the instance. The solutions architect needs to be able to access the instance from the internet.Which combination of actions should the solutions architect take to accomplish this goal? (Select TWO)

• A. Create an internet gateway. Attach the internet gateway to the VPC ✓
• B. Create an internet gateway. Attach the internet gateway to the instance's subnet
• C. Create an internet gateway Attach the internet gateway to the instance
• D. Add a route to the route table of the instance's subnet. Route traffic from the instance's subnet to the internet gateway ✓
• E. Add a route to the route table of the instance's subnet Route traffic from the internet gateway to the instance's subnet

Correct Answer: A. Create an internet gateway. Attach the internet gateway to the VPC, D. Add a route to the route table of the instance's subnet. Route traffic from the instance's subnet to the internet gateway

Explanation

To access the instance from the internet, the solutions architect should take the following actions:A. Create an internet gateway and attach it to the VPC. This allows the VPC to connect to the internet. D. Add a route to the route table of the instance's subnet. This route should route traffic from the instance's subnet to the internet gateway. This ensures that traffic from the instance can flow to the internet and back. By performing these two actions, the solutions architect enables internet connectivity for the instance and allows access to it from the internet.