CompTIA DataX (CNX-001) — Question 10

A SaaS company is launching a new product based in a cloud environment. The new product will be provided as an API and should not be exposed to the internet. Which of the following should the company create to best meet this requirement?

Answer options

• A. A transit gateway that connects the API to the customer's VPC
• B. Firewall rules allowing access to the API endpoint from the customer's VPC
• C. A VPC peering connection from the API VPC to the customer's VPC
• D. A private service endpoint exposing the API endpoint to the customer's VPC

Correct answer: D

Explanation

The correct answer is D because a private service endpoint allows secure and private access to the API from the customer's VPC without exposing it to the internet. Options A, B, and C do not provide the same level of isolation and security needed for the API in a cloud environment, as they either require internet exposure or do not establish a direct private connection.