AWS Certified Advanced Networking - Specialty ANS-C01 — Topic 1 Question 126

Question

A company needs to temporarily scale out capacity for an on-premises application and wants to deploy new servers on Amazon EC2 instances. A network engineer must design the networking solution for the connectivity and for the application on AWS. The EC2 instances need to share data with the existing servers in the on-premises data center. The servers must not be accessible from the internet. All traffic to the internet must route through the firewall in the on-premises data center. The servers must be able to access a third-party web application. Which configuration will meet these requirements?

Accepted Answer

Correct answer: B. The correct answer is B. Option B: Create a VPC that has private subnets. Create a customer gateway, a virtual private gateway, and an AWS Site-to-Site VPN connection. Create a route table, and associate the private subnets with the route table. Add a... AWS Site-to-Site VPN provides encrypted connectivity between on premises and a VPC.

AWS Certified Advanced Networking - Specialty ANS-C01 — Question 126