AWS Certified Sysops Administrator Associate · Free Practice Question Medium

Question 38

A SysOps administrator is deploying a new website running on Amazon EC2 instances. The application requires both incoming and outgoing connectivity to the internet.

Which combination of steps are required to provision the required connectivity? (Select TWO.)

  • A

    Add an entry to the route table for the subnet that points to an internet gateway.

  • B

    Add a NAT gateway to a public subnet and update the route table.

  • C

    Attach an Elastic IP address to the internet gateway.

  • D

    Attach a private address to the elastic network interface on the EC2 instance.

  • E

    Create an internet gateway and attach it to a VPC.

Reveal correct answers

Correct answers: A, E

Explanation

Public subnets allow communication to and from the internet. There are several configuration settings that you must define to enable bi-directional internet connectivity. First, you must create an internet gateway and attach it to the VPC. Then, you must update the route table of the subnet to point to the internet gateway.

Finally, you will need to ensure your instances get public IP addresses and this can be automated by setting the “auto-assign public IP4 addresses” configuration option for the subnet.

CORRECT: "Add an entry to the route table for the subnet that points to an internet gateway" is a correct answer.

CORRECT: "Create an internet gateway and attach it to a VPC" is also a correct answer.

INCORRECT: "Add a NAT gateway to a public subnet and update the route table" is incorrect. NAT gateways are used for outbound connectivity only from private subnets.

INCORRECT: "Attach a private address to the elastic network interface on the EC2 instance" is incorrect. A private IP is automatically assigned to all EC2 instances; a public IP is needed for bi-directional internet connectivity.

INCORRECT: "Attach an Elastic IP address to the internet gateway" is incorrect. Internet gateways are automatically provisioned with connectivity, you do not need to manually assign an EIP.

References:

https://docs.aws.amazon.com/vpc/latest/userguide/VPC_Subnets.html

Save time with our AWS cheat sheets:

https://digitalcloud.training/amazon-vpc/

Discussion

Think the marked answer is wrong, or have a better explanation? Share it below — comments appear after review.

You must be logged in to post a comment.

Preparing For

Your Certification?

255+ certifications
Detailed explanations
Free PDF samples

Has All The Questions You Need