AWS Amazon VPC logical thinking

You have a web application running in a private subnet of your VPC, and you want to allow secure remote access to the application for maintenance and troubleshooting. Which AWS service should you use for this use case?

• Internet Gateway

• NAT Gateway

• Security Group

• Bastion Host

Your organization needs to establish a high-speed, dedicated network connection between your on-premises data center and AWS for optimal data transfer. Which AWS service would you choose for this scenario?

• VPC Peering

• VPN Gateway

• AWS Direct Connect

• NAT Gateway

You have two VPCs in different AWS regions, and you need to enable private communication between resources in these VPCs. Which AWS feature should you use?

• VPC Peering

• Security Group

• NAT Gateway

• Internet Gateway

Your application requires secure access to Amazon S3 and Amazon DynamoDB without exposing your resources to the public internet. Which AWS feature can help you achieve this?

• NAT Gateway

• VPC Endpoint

• Security Group

• Internet Gateway

You have a VPC hosting a database server, and you want to restrict incoming traffic to the database from a specific set of IP addresses. What AWS resource should you configure for this use case?

• Security Group

• NACL

• NAT Gateway

• Internet Gateway

You have a VPC with multiple subnets, and you want to control access to resources based on the source IP address. Which AWS resource should you use for this level of control?

• VPC Endpoint

• Security Group

• NACL

• Internet Gateway

Your organization needs to allow users to securely access and manage Amazon RDS instances running within a VPC. What AWS service should you configure to provide this access?

• Security Group

• Internet Gateway

• VPC Peering

• Bastion Host