For IndividualsFor Educators
ExpertMinds LogoExpertMinds
ExpertMinds

Ace your certifications with Practice Exams and AI assistance.

  • Browse Exams
  • For Educators
  • Blog
  • Privacy Policy
  • Terms of Service
  • Cookie Policy
  • Support
  • AWS SAA Exam Prep
  • PMI PMP Exam Prep
  • CPA Exam Prep
  • GCP PCA Exam Prep

© 2026 TinyHive Labs. Company number 16262776.

    PracticeAWS Solutions Architect Associate (SAA-C03)AWS SAA-C03 Practice Exam 4Question 11
    Medium1 markMultiple Choice
    Domain 1.2: Secure WorkloadsSecurityVPCS3Cost Optimization

    AWS SAA-C03 · Question 11 · Domain 1.2: Secure Workloads

    A company has an application running on Amazon EC2 instances in a private subnet. The application needs to securely access Amazon S3 to download configuration files. The security team dictates that traffic between the EC2 instances and S3 must not traverse the public internet. <br/><br/>Which solution meets these requirements MOST cost-effectively?

    Answer options:

    A.

    Deploy a NAT Gateway in a public subnet and route S3 traffic through it.

    B.

    Create an Interface VPC Endpoint (AWS PrivateLink) for Amazon S3.

    C.

    Create a Gateway VPC Endpoint for Amazon S3 and update the route table.

    D.

    Set up an AWS Direct Connect connection between the VPC and Amazon S3.

    How to approach this question

    Identify the service that provides private access to S3 without hourly charges.

    Full Answer

    C.Create a Gateway VPC Endpoint for Amazon S3 and update the route table.✓ Correct
    A Gateway VPC Endpoint provides reliable connectivity to Amazon S3 and DynamoDB without requiring an internet gateway or a NAT device for your VPC. Gateway endpoints do not incur hourly billing charges.

    Common mistakes

    Selecting Interface Endpoint (PrivateLink) which costs money, or NAT Gateway which uses the public internet.
    Question 10All questionsQuestion 12

    Practice the full AWS SAA-C03 Practice Exam 4

    65 questions · hints · full answers · grading

    Sign up freeTake the exam

    More questions from this exam

    Q01A company has multiple AWS accounts in an AWS Organizations organization. The security team wants...MediumQ02An application running on Amazon EC2 instances needs to access an Amazon DynamoDB table. Both res...EasyQ03A company is designing a web application that will be hosted on AWS. The application will use an ...MediumQ04A company is building a mobile app that requires users to authenticate using their social media a...HardQ05A solutions architect is designing a VPC for a three-tier web application. The database tier must...Medium
    View all 65 questions →