For IndividualsFor Educators
ExpertMinds LogoExpertMinds
ExpertMinds

Ace your certifications with Practice Exams and AI assistance.

  • Browse Exams
  • For Educators
  • Blog
  • Privacy Policy
  • Terms of Service
  • Cookie Policy
  • Support
  • AWS SAA Exam Prep
  • PMI PMP Exam Prep
  • CPA Exam Prep
  • GCP PCA Exam Prep

© 2026 TinyHive Labs. Company number 16262776.

    PracticeAWS Solutions Architect Associate (SAA-C03)AWS SAA-C03 Practice Exam 3Question 59
    Hard1 markMultiple Choice
    Domain 4.4: Network Cost OptimizationDomain 4VPC EndpointNetworkingCost Optimization

    AWS SAA-C03 · Question 59 · Domain 4.4: Network Cost Optimization

    EC2 instances in a private subnet frequently download large datasets from Amazon S3. The traffic currently routes through a NAT Gateway. The company's AWS bill shows high data processing charges for the NAT Gateway. How can a solutions architect eliminate these NAT Gateway costs?

    Answer options:

    A.

    Create an Interface VPC Endpoint for S3.

    B.

    Create a Gateway VPC Endpoint for S3.

    C.

    Move the EC2 instances to a public subnet.

    D.

    Replace the NAT Gateway with a NAT Instance.

    How to approach this question

    Identify the cost source (NAT Gateway data processing). Gateway Endpoints for S3 are free.

    Full Answer

    B.Create a Gateway VPC Endpoint for S3.✓ Correct
    A Gateway VPC Endpoint provides reliable connectivity to Amazon S3 without requiring an internet gateway or a NAT device. Crucially, Gateway endpoints are provided at no additional charge, eliminating the NAT Gateway data processing fees.

    Common mistakes

    Selecting Interface VPC Endpoint, which costs money per hour and per GB processed.
    Question 58All questionsQuestion 60

    Practice the full AWS SAA-C03 Practice Exam 3

    65 questions · hints · full answers · grading

    Sign up freeTake the exam

    More questions from this exam

    Q01A company stores sensitive documents in an Amazon S3 bucket. The security team requires that only...EasyQ02A large enterprise uses AWS Organizations to manage multiple accounts. The security team wants to...MediumQ03A company hosts a web application on Amazon EC2 instances behind an Application Load Balancer (AL...EasyQ04A company wants to continuously monitor its AWS accounts for malicious activity and unauthorized ...MediumQ05A company needs to encrypt data at rest in Amazon RDS and manage database credentials securely. T...Medium
    View all 65 questions →