ExamGecko
Question list
Search
Search

List of questions

Search

Related questions











Question 307 - DBS-C01 discussion

Report
Export

A company has a hybrid environment in which a VPC connects to an on-premises network through an AWS Site-to-Site VPN connection. The VPC contains an application that is hosted on Amazon EC2 instances. The EC2 instances run in private subnets behind an Application Load Balancer (ALB) that is associated with multiple public subnets. The EC2 instances need to securely access an Amazon DynamoDB table.

Which solution will meet these requirements?

A.
Use the internet gateway of the VPC to access the DynamoDB table. Use the ALB to route the traffic to the EC2 instances.
Answers
A.
Use the internet gateway of the VPC to access the DynamoDB table. Use the ALB to route the traffic to the EC2 instances.
B.
Add a NAT gateway in one of the public subnets of the VPC_ Configure the security groups of the EC2 instances to access the DynamoDB table through the NAT gateway
Answers
B.
Add a NAT gateway in one of the public subnets of the VPC_ Configure the security groups of the EC2 instances to access the DynamoDB table through the NAT gateway
C.
Use the Site-to-Site VPN connection to route all DynamoD8 network traffic through the on-premises network infrastructure to access the EC2 instances
Answers
C.
Use the Site-to-Site VPN connection to route all DynamoD8 network traffic through the on-premises network infrastructure to access the EC2 instances
D.
Create a VPC endpoint for DynamoDB_ Assign the endpoint to the route table of the private subnets that contain the EC2 instances.
Answers
D.
Create a VPC endpoint for DynamoDB_ Assign the endpoint to the route table of the private subnets that contain the EC2 instances.
Suggested answer: D

Explanation:

Option D is correct because it meets the requirements of securely accessing a DynamoDB table from EC2 instances in a hybrid environment.A VPC endpoint for DynamoDB enables EC2 instances in a VPC to use their private IP addresses to access DynamoDB with no exposure to the public internet1. The EC2 instances do not require public IP addresses, and do not need an internet gateway, a NAT device, or a virtual private gateway in the VPC. The endpoint policy and the security groups of the EC2 instances can control access to DynamoDB. Traffic between the VPC and DynamoDB does not leave the Amazon network. Assigning the endpoint to the route table of the private subnets that contain the EC2 instances ensures that any requests to DynamoDB from those subnets are routed to the private endpoint within the Amazon network.

asked 16/09/2024
Ilia Voronkov
41 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first