A Security Officer Has Requested That Internet Access Be Removed

question 162

Multiple Choice

A security officer has requested that internet access be removed from subnets in a VPC. The subnets currently route internet-bound traffic to a NAT gateway. A SysOps administrator needs to remove this access while allowing access to Amazon S3. Which solution will meet these requirements?

• A) Set up an internet gateway. Update the route table on the subnets to use the internet gateway to route traffic to Amazon S3.
• B) Set up an S3 VPC gateway endpoint. Update the route table on the subnets to use the gateway endpoint to route traffic to Amazon S3.
• C) Set up additional NAT gateways in each Availability Zone. Update the route table on the subnets to use the NAT gateways to route traffic to Amazon S3.
• D) Set up an egress-only internet gateway. Update the route table on the subnets to use the egress-only internet gateway to route traffic to Amazon S3.

---

Definitions:

Cashier's Check

A check issued by a bank, drawn on its own funds and signed by a cashier, guaranteeing payment.

Liable

The condition of being legally accountable for specific actions or responsibilities, particularly in relation to debts or legal duties.

Oral Stop-Payment Order

A verbal instruction to a financial institution to cancel the payment process of a check or transaction.

Good

An item or product that is manufactured or produced for sale, often tangible, and exchanged in the marketplace.