AWS Certified CloudOps Engineer Associate SOA-C03 Practice Question

An operations engineer launches an EC2 instance in a subnet that has an Elastic IP address associated with its network interface. The VPC already has an internet gateway attached, but the instance cannot reach the public internet. Security group rules allow outbound HTTPS traffic. Which change will enable the instance to establish outbound internet connectivity in the most cost-effective manner?

  • Deploy a NAT gateway in the subnet and point the default route to the NAT gateway.

  • Associate the internet gateway directly with the subnet instead of the VPC.

  • Create an egress-only internet gateway and add a default IPv4 route to it.

  • Add a 0.0.0.0/0 route in the subnet's route table that targets the internet gateway.

AWS Certified CloudOps Engineer Associate SOA-C03
Networking and Content Delivery
Your Score:
Settings & Objectives
Random Mixed
Questions are selected randomly from all chosen topics, with a preference for those you haven’t seen before. You may see several questions from the same objective or domain in a row.
Rotate by Objective
Questions cycle through each objective or domain in turn, helping you avoid long streaks of questions from the same area. You may see some repeat questions, but the distribution will be more balanced across topics.

Check or uncheck an objective to set which questions you will receive.

Bash, the Crucial Exams Chat Bot
AI Bot