Free SAA-C03 Web TestEngine Demo

Q77 Single choice

A company runs compute workloads across multiple private subnets across multiple VPCs. Sometimes the company opens shell access to Amazon EC2 instances in the private subnets to troubleshoot issues.

The current design uses NAT gateways. The company wants to reduce costs. However, the company does not support the following:

- Using public IP addresses
- Installing agents on instances
- Permitting inbound internet access

Which solution will meet these requirements MOST cost-effectively?

A
Create an EC2 Instance Connect Endpoint in each VPC. Grant IAM permissions for administrators to connect to instances by using SSH. Decommission all NAT gateways.
B
Use AWS Systems Manager Session Manager to connect to instances.
C
Deploy auto scaling bastion hosts behind a Network Load Balancer in each VPC. Restrict inbound access by source IP.
D
Create an AWS Client VPN configuration. Create routes across each VPC. Decommission all NAT gateways except one. Target the remaining NAT gateway for outbound traffic from all VPCs.

SAA-C03 Web TestEngine demo