SCS-C02 Practice Test

Question 1 of 5

Single choice

Instances in private subnets must download OS patches from the internet, but no inbound connection from the internet may be allowed. Which component should be used?

Choose one answer

A. A NAT gateway in a public subnet with a route to it from the private route table
B. An internet gateway attached to the private subnet route table
C. VPC peering to a patch server VPC
D. An Elastic IP on each instance with an inbound allow rule

Choose an answer or reveal it to continue.

Keyboard shortcuts:A to D or 1 to 4answerEntercheck the answer←→previous or nextFflag for review

SCS-C02AWS Certified Security - Specialtypractice test