You need to allow resources in a private subnet to access the internet. Which of the following must be present to enable this access? (Select the best answer)

Question

BlackTom AI · Accepted Answer

To enable resources in a private subnet to reach the internet, there needs to be a mechanism that translates private IP addresses to a routable public IP address for outbound traffic.

Option 1: NAT gateway. This is the correct mechanism: a NAT gateway (or NAT instance) allows instances in a private subnet to initiate outbound traffic to the internet while preventing direct inbound unsolicited traffic from the internet. It sits in a public subnet and the private subnet routes default traffic to the NAT device, which then uses the internet gateway to reach the internet. This directly answers the requirement for internet access from a private subnet.

Option 2: Route tables. Route tables themselves define where traffic goes (e.g., to the internet via an internet gateway or to a NAT), but they do not perform address translation or enable internet access by themselves. A route table must point private subnet traffic to a NAT gateway or to an internet gateway, but without NAT, outbound internet access won’t function.

Option 3: Network access control lists. NACLs are stateless rules controlling traffic at the subnet boundary. While they can permit or deny traffic, they do not perform translation or enable connectivity by themselves. Even with permissive NACLs, private instances would still need NAT for internet egress.

Option 4: Security groups. Security groups are stateful firewalls at the instance level, controlling which traffic is allowed in and out. They do not provide NAT or handle the actual routing to the internet. An instance could be restricted by its security group and still lack egress unless a NAT device and appropriate routing exist.

In summary, while route tables, NACLs, and security groups influence traffic flow and permissions, the essential component that enables private-subnet resources to access the internet is a NAT gateway, which provides the necessary address translation for outbound traffic. The other options describe important networking components, but they do not by themselves enable internet access from a private subnet.

You need to allow resources in a private subnet to access the internet. Which of the following must be present to enable this access? (Select the best answer)

查看解析

登录即可查看完整答案

类似问题

To enable a resource in a private subnet to connect to the public Internet, which of these must be included in your VPC configuration?

In a consumer society, many adults channel creativity into buying things

Economic stress and unpredictable times have resulted in a booming industry for self-help products

People born without creativity never can develop it

A product has a selling price of $20, a contribution margin ratio of 40% and fixed cost of $120,000. To make a profit of $30,000. The number of units that must be sold is: Type the number without $ and a comma. Eg: 20000

Which of the following statement regarding cost is correct:

Under the assumptions used in cost-volume-profit analysis, as the activity increases:

The CVP and break-even analysis are supported by a range of important assumptions. Which of the following is not an assumption of the CVP:

更多留学生实用工具

考试浏览器助手

风格化写作助手

论文查重助手

文献引用助手

课堂转译助手

课堂笔记助手

Quiz搜索助手

学校历年真题

智能刷题助手

智能匹配练习

希望你的学习变得更简单