A Security Officer Has Requested That Internet Access Be Removed

question 162

Multiple Choice

A security officer has requested that internet access be removed from subnets in a VPC. The subnets currently route internet-bound traffic to a NAT gateway. A SysOps administrator needs to remove this access while allowing access to Amazon S3. Which solution will meet these requirements?

• A) Set up an internet gateway. Update the route table on the subnets to use the internet gateway to route traffic to Amazon S3.
• B) Set up an S3 VPC gateway endpoint. Update the route table on the subnets to use the gateway endpoint to route traffic to Amazon S3.
• C) Set up additional NAT gateways in each Availability Zone. Update the route table on the subnets to use the NAT gateways to route traffic to Amazon S3.
• D) Set up an egress-only internet gateway. Update the route table on the subnets to use the egress-only internet gateway to route traffic to Amazon S3.

---

Definitions:

Instances

Specific examples or occurrences of a particular event or situation.

Acquire

To gain possession or control of something, often through effort or skill.

Nonconscious Processes

Mental processes occurring outside of and not available to conscious awareness.

Convergent Thinking

A cognitive process in which a person attempts to find a single, correct answer to a problem.