Home / Amazon / SAA-C01 / Question 327

An application has components running in a public subnet and a private subnet. The components within the private subnet must connect to the internet to receive updates.How should this be accomplished without moving the components into a public subnet?

• A. Add an internet gateway to the private subnet and update the private subnet route table.

• B. Add a NAT gateway to the public subnet and update the public subnet route table.

• C. Add an internet gateway to the VPC and update the private subnet route table.

• D. Add a NAT gateway to the public subnet and update the private subnet route table.

A NAT gateway with its own Elastic IPv4 address. Instances in the private subnet can send requests to the Internet through the NAT gateway over IPv4 (for example, for software updates).https://docs.aws.amazon.com/vpc/latest/userguide/VPC_Scenario2.html