AWS Certified Solution Architect – Associate

Set · SAA-C01 V15.35

A Solutions Architect created an Amazon VPC with two public subnets and two private subnets. A corporate security mandate requires all Amazon EC2 instance be launched in a private subnet. However, when an EC2 instance running Apache on ports 80 and 443 is launched in the private subnet, no external internet traffic can connect with the server. What actions should be taken address this situation?

Select oneEnsure the security group attached to the EC2 instance allows HTTP traffic on port 80 and HTTPS traffic on port 443. Ensure external DNS resolution directs to the IP address of the EC2 instanceLaunch a NAT Gateway in the private subnet, change the default route to the NAT Gateway, and attach a public Elastic IP address to the NAT Gateway. Ensure external DNS resolution directs to the Elastic IP addressLaunch an internet-facing Application Load Balancer with the EC2 instance as its endpoint. Ensure external DNS resolution directs to the Application Load BalancerAttach the EC2 instance to an Auto Scaling group in the private subnet. Ensure external DNS resolution directs to the Auto Scaling group

Questions & review

CorrectIncorrectUnanswered

Question link

About this exam

The AWS Certified Solutions Architect - Associate practice questions are intended for individuals who perform a solutions architect role and have one or more years of hands-on experience designing available, cost-efficient, fault-tolerant, and scalable distributed systems on AWS.