To enable a resource in a private subnet to connect to the public Internet, which of these must be included in your VPC configuration?

Question

To enable a resource in a private subnet to connect to the public Internet, which of these must be included in your VPC configuration?

BlackTom AI · Accepted Answer

To understand how a resource in a private subnet can reach the public Internet, we need to look at how traffic exits a VPC. 
Option 1: Amazon CloudFront — CloudFront is a content delivery network used to cache and serve content from edge locations to end users; it is not used to enable private subnets to access the Internet directly, so this is not appropriate for egress connectivity. 
Option 2: VPN — A VPN connection provides private connectivity from your on‑premises network or remote sites to a VPC, not a mechanism for private subnets to reach the Internet inherently. It does not route general Internet-bound traffic from within a VPC by default. 
Option 3: Internet Gateway — An Internet Gateway allows resources with public IP addresses in a VPC to reach the Internet and for the Internet to reach those resources. However, private subnets typically do not have public IPs; without NAT, they cannot access the Internet. This is why alone it’s not sufficient for private-subnet Internet access. 
Option 4: Network access control list (NACL) — NACLs are stateless filters that control traffic to and from subnets, but they do not perform NAT or translate addresses; on their own, they do not enable Internet access for private subnets. 
Option 5: NAT gateway — A NAT gateway provides network address translation for instances in a private subnet, enabling them to initiate outbound connections to the Internet (and receive responses) while still preventing inbound connections from the Internet. This directly solves the requirement of enabling a private subnet resource to connect to the public Internet. 
In summary, among the listed components, the NAT gateway is the mechanism that enables outbound Internet access for resources in a private subnet, by translating private IPs to a public address while maintaining the private network’s isolation. The other options either serve different purposes or do not provide the required outbound translation functionality.

S2501-CPSC-4440-002-19186 Exam 1 - Midterm

To enable a resource in a private subnet to connect to the public Internet, which of these must be included in your VPC configuration?

View Explanation

Log in for full answers

Similar Questions

You need to allow resources in a private subnet to access the internet. Which of the following must be present to enable this access? (Select the best answer)

In a consumer society, many adults channel creativity into buying things

Economic stress and unpredictable times have resulted in a booming industry for self-help products

People born without creativity never can develop it

A product has a selling price of $20, a contribution margin ratio of 40% and fixed cost of $120,000. To make a profit of $30,000. The number of units that must be sold is: Type the number without $ and a comma. Eg: 20000

Which of the following statement regarding cost is correct:

Under the assumptions used in cost-volume-profit analysis, as the activity increases:

The CVP and break-even analysis are supported by a range of important assumptions. Which of the following is not an assumption of the CVP:

More Practical Tools for Students Powered by AI Study Helper

Homework AI Solver

Stylized AI Paper Writer

Plagiarism Checker Assistant

Citation AI Academic Writing Tool

In-Class Translation Assistant

AI Note Generator

AI Quiz Answers

Past Exam Questions from University Test Bank

Smart Practice Assistant

Adaptive Practice

Making Your Study Simpler