For IndividualsFor Educators
ExpertMinds LogoExpertMinds
ExpertMinds

Ace your certifications with Practice Exams and AI assistance.

  • Browse Exams
  • For Educators
  • Blog
  • Privacy Policy
  • Terms of Service
  • Cookie Policy
  • Support
  • AWS SAA Exam Prep
  • PMI PMP Exam Prep
  • CPA Exam Prep
  • GCP PCA Exam Prep

© 2026 TinyHive Labs. Company number 16262776.

    PracticeAWS Solutions Architect Professional (SAP-C02)AWS Solutions Architect Professional SAP-C02 Practice Exam 2Question 72
    Medium1 markMultiple Choice
    Domain 2.1: Deployment StrategyLambdaVPCPrivateLink

    AWS SAP-C02 · Question 72 · Domain 2.1: Deployment Strategy

    An architect is designing a serverless application using AWS Lambda. The function needs to access a database hosted in a private subnet of a VPC. When the Lambda function is attached to the VPC, it loses internet access and can no longer call the AWS Systems Manager Parameter Store API. How can this be fixed MOST securely?

    Answer options:

    A.

    Attach an Elastic IP to the Lambda function.

    B.

    Move the Lambda function to a public subnet.

    C.

    Create a VPC Interface Endpoint (AWS PrivateLink) for Systems Manager in the private subnet.

    D.

    Deploy a NAT Gateway in the private subnet.

    How to approach this question

    Use VPC Endpoints for private AWS API access.

    Full Answer

    C.Create a VPC Interface Endpoint (AWS PrivateLink) for Systems Manager in the private subnet.✓ Correct
    Create a VPC Interface Endpoint (AWS PrivateLink) for Systems Manager in the private subnet.
    When a Lambda function is connected to a VPC, it routes all outbound traffic through the VPC. To access AWS services like SSM securely without a NAT Gateway and internet access, you should use VPC Interface Endpoints (PrivateLink).

    Common mistakes

    Trying to put a NAT Gateway in a private subnet.
    Question 71All questionsQuestion 73

    Practice the full AWS Solutions Architect Professional SAP-C02 Practice Exam 2

    75 questions · hints · full answers · grading

    Sign up freeTake the exam

    More questions from this exam

    Q01A company is setting up a multi-account AWS environment using AWS Organizations. They need to ens...EasyQ02An enterprise needs to connect its on-premises data center to AWS. They require a dedicated, priv...EasyQ03A company wants to share a single AWS Transit Gateway across multiple AWS accounts within their A...EasyQ04An architect needs to design a highly available database architecture that spans multiple AWS Reg...EasyQ05A global financial institution is migrating its core banking application to AWS. The application ...Medium
    View all 75 questions →