For IndividualsFor Educators
ExpertMinds LogoExpertMinds
ExpertMinds

Ace your certifications with Practice Exams and AI assistance.

  • Browse Exams
  • For Educators
  • Blog
  • Privacy Policy
  • Terms of Service
  • Cookie Policy
  • Support
  • AWS SAA Exam Prep
  • PMI PMP Exam Prep
  • CPA Exam Prep
  • GCP PCA Exam Prep

© 2026 TinyHive Labs. Company number 16262776.

    PracticeAWS Solutions Architect Associate (SAA-C03)AWS SAA-C03 Practice Exam 7Question 61
    Medium1 markMultiple Choice
    Domain 4.4: Network Cost OptimizationCostVPC EndpointNAT Gateway

    AWS SAA-C03 · Question 61 · Domain 4.4: Network Cost Optimization

    An application running in a VPC private subnet needs to download large amounts of data from Amazon S3. Currently, the traffic routes through a NAT Gateway. The company's AWS bill shows high data processing charges for the NAT Gateway. How can a solutions architect eliminate these NAT Gateway data processing costs?

    Answer options:

    A.

    Move the EC2 instances to a public subnet.

    B.

    Replace the NAT Gateway with a NAT Instance.

    C.

    Create a VPC Gateway Endpoint for Amazon S3.

    D.

    Use AWS Direct Connect.

    How to approach this question

    Identify the cost issue: NAT Gateway data processing fees. Gateway Endpoints for S3/DynamoDB are free and bypass the NAT.

    Full Answer

    C.Create a VPC Gateway Endpoint for Amazon S3.✓ Correct
    VPC Gateway Endpoints for Amazon S3 and DynamoDB are provided at no additional charge. They allow private instances to access S3 without going through a NAT Gateway, eliminating NAT data processing charges.

    Common mistakes

    Thinking Interface Endpoints (PrivateLink) are free (they charge per hour and per GB). Gateway Endpoints are free.
    Question 60All questionsQuestion 62

    Practice the full AWS SAA-C03 Practice Exam 7

    65 questions · hints · full answers · grading

    Sign up freeTake the exam

    More questions from this exam

    Q01A company has multiple AWS accounts in an AWS Organizations organization. The security team needs...MediumQ02An application runs on Amazon EC2 instances and needs to access an Amazon S3 bucket. What is the ...EasyQ03A company wants to implement federated access to the AWS Management Console for its employees usi...MediumQ04A company is building a mobile application that requires users to sign in using their social medi...EasyQ05A security team wants to enforce MFA for all IAM users before they can terminate EC2 instances. H...Medium
    View all 65 questions →