You need to allow resources in a private subnet to access the internet. Which of the following must be present to enable this access? (Select the best answer)

Question

BlackTom AI · Accepted Answer

To enable resources in a private subnet to reach the internet, there needs to be a mechanism that translates private IP addresses to a routable public IP address for outbound traffic.

Option 1: NAT gateway. This is the correct mechanism: a NAT gateway (or NAT instance) allows instances in a private subnet to initiate outbound traffic to the internet while preventing direct inbound unsolicited traffic from the internet. It sits in a public subnet and the private subnet routes default traffic to the NAT device, which then uses the internet gateway to reach the internet. This directly answers the requirement for internet access from a private subnet.

Option 2: Route tables. Route tables themselves define where traffic goes (e.g., to the internet via an internet gateway or to a NAT), but they do not perform address translation or enable internet access by themselves. A route table must point private subnet traffic to a NAT gateway or to an internet gateway, but without NAT, outbound internet access won’t function.

Option 3: Network access control lists. NACLs are stateless rules controlling traffic at the subnet boundary. While they can permit or deny traffic, they do not perform translation or enable connectivity by themselves. Even with permissive NACLs, private instances would still need NAT for internet egress.

Option 4: Security groups. Security groups are stateful firewalls at the instance level, controlling which traffic is allowed in and out. They do not provide NAT or handle the actual routing to the internet. An instance could be restricted by its security group and still lack egress unless a NAT device and appropriate routing exist.

In summary, while route tables, NACLs, and security groups influence traffic flow and permissions, the essential component that enables private-subnet resources to access the internet is a NAT gateway, which provides the necessary address translation for outbound traffic. The other options describe important networking components, but they do not by themselves enable internet access from a private subnet.

You need to allow resources in a private subnet to access the internet. Which of the following must be present to enable this access? (Select the best answer)

View Explanation

Log in for full answers

Similar Questions

To enable a resource in a private subnet to connect to the public Internet, which of these must be included in your VPC configuration?

In a consumer society, many adults channel creativity into buying things

Economic stress and unpredictable times have resulted in a booming industry for self-help products

People born without creativity never can develop it

A product has a selling price of $20, a contribution margin ratio of 40% and fixed cost of $120,000. To make a profit of $30,000. The number of units that must be sold is: Type the number without $ and a comma. Eg: 20000

Which of the following statement regarding cost is correct:

Under the assumptions used in cost-volume-profit analysis, as the activity increases:

The CVP and break-even analysis are supported by a range of important assumptions. Which of the following is not an assumption of the CVP:

More Practical Tools for Students Powered by AI Study Helper

Homework AI Solver

Stylized AI Paper Writer

Plagiarism Checker Assistant

Citation AI Academic Writing Tool

In-Class Translation Assistant

AI Note Generator

AI Quiz Answers

Past Exam Questions from University Test Bank

Smart Practice Assistant

Adaptive Practice

Making Your Study Simpler