SAP-C02 Continuous Improvement for Existing Solutions Practice Question
A company is migrating a legacy application to AWS. The application requires a fixed IP address for whitelisting by a third-party service. The application will run on EC2 instances behind an Application Load Balancer. The company needs a solution that provides a static IP address for outbound traffic. What should a solutions architect do?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Place the EC2 instances in a private subnet and route outbound traffic through a NAT Gateway with an Elastic IP.
A NAT Gateway in a public subnet with an Elastic IP provides a static IP for outbound traffic from instances in private subnets. This allows the third-party service to whitelist that IP address. Option A is incorrect because replacing the ALB with an NLB would affect inbound traffic handling and does not solve outbound static IP requirements. Option B is incorrect because an Application Load Balancer cannot be assigned an Elastic IP; it uses dynamic IP addresses. Option D is incorrect because an Internet Gateway does not provide a static IP; it allows communication between VPC and internet but does not source traffic from a fixed IP.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Replace the ALB with a Network Load Balancer and assign Elastic IPs.
Why it's wrong here
NLB provides static IPs for inbound traffic, but outbound traffic still needs a NAT device.
- ✗
Assign an Elastic IP address to the Application Load Balancer.
Why it's wrong here
ALBs do not support Elastic IP assignment.
- ✓
Place the EC2 instances in a private subnet and route outbound traffic through a NAT Gateway with an Elastic IP.
Why this is correct
NAT Gateway with Elastic IP provides a static source IP for outbound traffic.
- ✗
Attach an Internet Gateway to the VPC and assign an Elastic IP to it.
Why it's wrong here
Internet Gateways do not have Elastic IPs.
Visual reference
Go deeper
Related to this question
About these practice questions
Courseiva writes every SAP-C02 question from scratch — 1,660 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This SAP-C02 practice question is part of Courseiva's free Amazon Web Services certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SAP-C02 exam.