AWS Certified SAP on AWS - Specialty PAS-C01 — Topic 1 Question 99

Question

A company recently implemented an architecture in which all the systems and components of the company's SAP environment are hosted on AWS. Front-end users connect from the corporate data center. SAP application servers and database servers are hosted in a private subnet. The company has the following requirements: • Ensure that the instances in the private subnet can connect to the internet and other AWS services. • Prevent instances from receiving inbound traffic that is initiated by someone on the inter-net. • For SAP support, allow a remote connection between the company's network and SAP. Ensure that access is available to the production environment as needed. Which solution will meet these requirements?

Accepted Answer

Correct answer: A. The correct answer is A. Option A: Use a NAT gateway to ensure connectivity between the instances in the private subnet and other AWS services. Deploy SAProuter in a public subnet. Assign a public IP address that is reachable from the internet. A NAT gateway lets private subnet resources reach the internet for outbound traffic only.

AWS Certified SAP on AWS - Specialty PAS-C01 — Question 99