PAS-C01 Technology Practice Question

Exhibit

Refer to the exhibit.

Resources:
  SAPEC2Instance:
    Type: AWS::EC2::Instance
    Properties:
      ImageId: ami-0abcdef1234567890
      InstanceType: r5.4xlarge
      BlockDeviceMappings:
        - DeviceName: /dev/xvda
          Ebs:
            VolumeSize: 50
            VolumeType: gp3
            Encrypted: true
      NetworkInterfaces:
        - DeviceIndex: 0
          GroupSet:
            - !Ref SecurityGroup

An SAP administrator is reviewing a CloudFormation template snippet shown in the exhibit. The template creates an EC2 instance for SAP. What is missing from the template to ensure the instance is placed in a specific subnet?

⚠ Common exam trap

Many candidates assume the SubnetId can be specified at the instance level even when using NetworkInterface, but AWS CloudFormation requires SubnetId to be defined inside the NetworkInterface when that property is present, and omitting it causes the instance to launch in the default subnet rather than failing with a clear error.

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

✓

The SubnetId property is not specified in the NetworkInterface

The CloudFormation template snippet shows a NetworkInterface property being used to attach the EC2 instance to a VPC network. When you specify a NetworkInterface, you must include the SubnetId within that interface definition to place the instance in a specific subnet. Without SubnetId, the instance will be launched into the default subnet of the default VPC, which may not be the intended subnet for SAP workloads requiring specific network segmentation or latency constraints.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

✓
The SubnetId property is not specified in the NetworkInterface
Why this is correct
SubnetId is required to place the instance in a subnet.
✗
The InstanceType is not suitable for SAP
Why it's wrong here
r5.4xlarge is suitable for SAP.
✗
The ImageId is invalid
Why it's wrong here
ImageId is provided, though it's a placeholder.
✗
The SecurityGroup reference is missing
Why it's wrong here
SecurityGroup is referenced via !Ref.

Visual reference

Go deeper

PAS-C01 Technology Practice Question

Exhibit

Why each option matters

Option-by-option breakdown

Related to this question