An application runs on Amazon EC2 instances in multiple Availability Zones (AZs) behind an Application Load Balancer. The load balancer is in public subnets; the EC2 instances are in private subnets and must not be accessible from the internet. The EC2 instances must call external services on the internet. If one AZ becomes unavailable, the remaining EC2 instances must still be able to call the external services.How should these requirements be met?

Question

Accepted Answer

Create a NAT gateway in each AZ. Update the route tables for each private subnet to direct internet-bound traffic to the NAT gateway.

Answer

Create a NAT gateway attached to the VPC. Add a route to the gateway to each private subnet route table

Answer

Configure an internet gateway. Add a route to the gateway to each private subnet route table.

Answer

Create a NAT instance in the private subnet of each AZ. Update the route tables for each private subnet to direct internet-bound traffic to the NAT instance.

Home / Amazon / SAA-C01 / Question 336

Question 336

Answers

A. Create a NAT gateway attached to the VPC. Add a route to the gateway to each private subnet route table

B. Configure an internet gateway. Add a route to the gateway to each private subnet route table.

C. Create a NAT instance in the private subnet of each AZ. Update the route tables for each private subnet to direct internet-bound traffic to the NAT instance.

D. Create a NAT gateway in each AZ. Update the route tables for each private subnet to direct internet-bound traffic to the NAT gateway.

Comments