Exam Bundle

AWS Direct Connect provides dedicated customer-to-AWS connectivity. This does not address the need for An organization must connect on-premises networking to a VPC over an IPsec-based tunnel. The appropriate AWS Site-to-Site VPN applies because Site-to-Site VPN provides encrypted tunnels across internet connectivity for supported on-premises-to-AWS links.

Amazon Route 53 provides managed DNS services. This does not address the need for An organization must connect on-premises networking to a VPC over an IPsec-based tunnel. The appropriate AWS Site-to-Site VPN applies because Site-to-Site VPN provides encrypted tunnels across internet connectivity for supported on-premises-to-AWS links.

Amazon CloudFront: Delivers and caches content at edge locations through a CDN. This does not address the need for An organization must connect on-premises networking to a VPC over an IPsec-based tunnel. The appropriate AWS Site-to-Site VPN applies because Site-to-Site VPN provides encrypted tunnels across internet connectivity for supported on-premises-to-AWS links.

AWS Site-to-Site VPN uses encrypted tunnels over internet connectivity. That does not meet the requirement: A bank requires dedicated network connectivity from its premises to AWS rather than internet-only VPN.

Amazon Route 53 provides managed DNS services. That does not meet the requirement: A bank requires dedicated network connectivity from its premises to AWS rather than internet-only VPN.

Amazon CloudFront: Delivers and caches content at edge locations through a CDN. That does not meet the requirement: A bank requires dedicated network connectivity from its premises to AWS rather than internet-only VPN.

AWS Site-to-Site VPN uses encrypted tunnels over internet connectivity. This does not address the need for A bank requires dedicated network connectivity from its premises to AWS rather than internet-only VPN. The appropriate AWS Direct Connect applies because Direct Connect establishes dedicated network connectivity from customer premises or partners to AWS.

Amazon Route 53 provides managed DNS services. This does not address the need for A bank requires dedicated network connectivity from its premises to AWS rather than internet-only VPN. The appropriate AWS Direct Connect applies because Direct Connect establishes dedicated network connectivity from customer premises or partners to AWS.

Amazon CloudFront: Delivers and caches content at edge locations through a CDN. This does not address the need for A bank requires dedicated network connectivity from its premises to AWS rather than internet-only VPN. The appropriate AWS Direct Connect applies because Direct Connect establishes dedicated network connectivity from customer premises or partners to AWS.

AWS Site-to-Site VPN uses encrypted tunnels over internet connectivity. That does not meet the requirement: Consider this AWS requirement: A data center wants a private network circuit into AWS using an AWS connectivity location.

Amazon CloudFront: Delivers and caches content at edge locations through a CDN. That does not meet the requirement: Consider this AWS requirement: A data center wants a private network circuit into AWS using an AWS connectivity location.

Amazon Route 53 provides managed DNS services. That does not meet the requirement: Consider this AWS requirement: A data center wants a private network circuit into AWS using an AWS connectivity location.

Amazon CloudFront: Delivers and caches content at edge locations through a CDN. This does not address the need for A data center wants a private network circuit into AWS using an AWS connectivity location. The appropriate AWS Direct Connect applies because Direct Connect establishes dedicated network connectivity from customer premises or partners to AWS.

AWS Site-to-Site VPN uses encrypted tunnels over internet connectivity. This does not address the need for A data center wants a private network circuit into AWS using an AWS connectivity location. The appropriate AWS Direct Connect applies because Direct Connect establishes dedicated network connectivity from customer premises or partners to AWS.

Amazon Route 53 provides managed DNS services. This does not address the need for A data center wants a private network circuit into AWS using an AWS connectivity location. The appropriate AWS Direct Connect applies because Direct Connect establishes dedicated network connectivity from customer premises or partners to AWS.

NAT gateway: Allows specified resources in private subnets to initiate outbound connections. That does not meet the requirement: A public subnet needs a route target connecting its VPC to the internet for appropriately addressed resources.

Transit gateway: Serves as a central network transit hub across VPCs and networks. That does not meet the requirement: A public subnet needs a route target connecting its VPC to the internet for appropriately addressed resources.

VPC endpoint connects a VPC to supported services without requiring an internet gateway. That does not meet the requirement: A public subnet needs a route target connecting its VPC to the internet for appropriately addressed resources.

NAT gateway: Allows specified resources in private subnets to initiate outbound connections. This does not address the need for A public subnet needs a route target connecting its VPC to the internet for appropriately addressed resources. The appropriate VPC internet gateway applies because An internet gateway enables internet routing for eligible VPC resources with appropriate routes and addressing.

VPC endpoint connects a VPC to supported services without requiring an internet gateway. This does not address the need for A public subnet needs a route target connecting its VPC to the internet for appropriately addressed resources. The appropriate VPC internet gateway applies because An internet gateway enables internet routing for eligible VPC resources with appropriate routes and addressing.

Transit gateway: Serves as a central network transit hub across VPCs and networks. This does not address the need for A public subnet needs a route target connecting its VPC to the internet for appropriately addressed resources. The appropriate VPC internet gateway applies because An internet gateway enables internet routing for eligible VPC resources with appropriate routes and addressing.

Transit gateway: Serves as a central network transit hub across VPCs and networks. That does not meet the requirement: A technical reviewer evaluates this need: A web server in a VPC must communicate with internet hosts using a public addressing path.

NAT gateway: Allows specified resources in private subnets to initiate outbound connections. That does not meet the requirement: A technical reviewer evaluates this need: A web server in a VPC must communicate with internet hosts using a public addressing path.

VPC endpoint connects a VPC to supported services without requiring an internet gateway. That does not meet the requirement: A technical reviewer evaluates this need: A web server in a VPC must communicate with internet hosts using a public addressing path.

VPC endpoint connects a VPC to supported services without requiring an internet gateway. This does not address the need for A web server in a VPC must communicate with internet hosts using a public addressing path. The appropriate VPC internet gateway applies because An internet gateway enables internet routing for eligible VPC resources with appropriate routes and addressing.

Transit gateway: Serves as a central network transit hub across VPCs and networks. This does not address the need for A web server in a VPC must communicate with internet hosts using a public addressing path. The appropriate VPC internet gateway applies because An internet gateway enables internet routing for eligible VPC resources with appropriate routes and addressing.

NAT gateway: Allows specified resources in private subnets to initiate outbound connections. This does not address the need for A web server in a VPC must communicate with internet hosts using a public addressing path. The appropriate VPC internet gateway applies because An internet gateway enables internet routing for eligible VPC resources with appropriate routes and addressing.

Amazon EFS provides elastic shared NFS file storage. That does not meet the requirement: A photo-sharing service needs durable object storage for user images accessed through APIs.

Amazon FSx provides managed specialized file systems. That does not meet the requirement: A photo-sharing service needs durable object storage for user images accessed through APIs.

Amazon EBS: EBS provides persistent block volumes for supported EC2 instance attachments. That does not meet the requirement: A photo-sharing service needs durable object storage for user images accessed through APIs.

Amazon EBS: EBS provides persistent block volumes for supported EC2 instance attachments. This does not address the need for A photo-sharing service needs durable object storage for user images accessed through APIs. The appropriate Amazon S3 applies because S3 stores objects in buckets through object APIs rather than mounting a block volume or conventional shared file system.

Amazon FSx provides managed specialized file systems. This does not address the need for A photo-sharing service needs durable object storage for user images accessed through APIs. The appropriate Amazon S3 applies because S3 stores objects in buckets through object APIs rather than mounting a block volume or conventional shared file system.

Amazon EFS provides elastic shared NFS file storage. This does not address the need for A photo-sharing service needs durable object storage for user images accessed through APIs. The appropriate Amazon S3 applies because S3 stores objects in buckets through object APIs rather than mounting a block volume or conventional shared file system.