To enable a resource in a private subnet to connect to the public Internet, which of these must be included in your VPC configuration?

Question

To enable a resource in a private subnet to connect to the public Internet, which of these must be included in your VPC configuration?

BlackTom AI · Accepted Answer

To understand how a resource in a private subnet can reach the public Internet, we need to look at how traffic exits a VPC. 
Option 1: Amazon CloudFront — CloudFront is a content delivery network used to cache and serve content from edge locations to end users; it is not used to enable private subnets to access the Internet directly, so this is not appropriate for egress connectivity. 
Option 2: VPN — A VPN connection provides private connectivity from your on‑premises network or remote sites to a VPC, not a mechanism for private subnets to reach the Internet inherently. It does not route general Internet-bound traffic from within a VPC by default. 
Option 3: Internet Gateway — An Internet Gateway allows resources with public IP addresses in a VPC to reach the Internet and for the Internet to reach those resources. However, private subnets typically do not have public IPs; without NAT, they cannot access the Internet. This is why alone it’s not sufficient for private-subnet Internet access. 
Option 4: Network access control list (NACL) — NACLs are stateless filters that control traffic to and from subnets, but they do not perform NAT or translate addresses; on their own, they do not enable Internet access for private subnets. 
Option 5: NAT gateway — A NAT gateway provides network address translation for instances in a private subnet, enabling them to initiate outbound connections to the Internet (and receive responses) while still preventing inbound connections from the Internet. This directly solves the requirement of enabling a private subnet resource to connect to the public Internet. 
In summary, among the listed components, the NAT gateway is the mechanism that enables outbound Internet access for resources in a private subnet, by translating private IPs to a public address while maintaining the private network’s isolation. The other options either serve different purposes or do not provide the required outbound translation functionality.

S2501-CPSC-4440-002-19186 Exam 1 - Midterm

To enable a resource in a private subnet to connect to the public Internet, which of these must be included in your VPC configuration?

查看解析

登录即可查看完整答案

类似问题

You need to allow resources in a private subnet to access the internet. Which of the following must be present to enable this access? (Select the best answer)

In a consumer society, many adults channel creativity into buying things

Economic stress and unpredictable times have resulted in a booming industry for self-help products

People born without creativity never can develop it

A product has a selling price of $20, a contribution margin ratio of 40% and fixed cost of $120,000. To make a profit of $30,000. The number of units that must be sold is: Type the number without $ and a comma. Eg: 20000

Which of the following statement regarding cost is correct:

Under the assumptions used in cost-volume-profit analysis, as the activity increases:

The CVP and break-even analysis are supported by a range of important assumptions. Which of the following is not an assumption of the CVP:

更多留学生实用工具

考试浏览器助手

风格化写作助手

论文查重助手

文献引用助手

课堂转译助手

课堂笔记助手

Quiz搜索助手

学校历年真题

智能刷题助手

智能匹配练习

希望你的学习变得更简单