Which of the following descriptions about NAT gateways is wrong?

Question

Options

• AEach subnet in a VPC can be bound to multiple SNAT rules
• BWhen the specification of ECS is changed, the configured NAT rules will become invalid
• CWhen the cloud host accesses the external network through the NAT gateway, its bandwidth is
• DDNAT and SNAT rules need to be configured separately

• A
  84% (43)
• B
  4% (2)
• C
  2% (1)
• D
  10% (5)

Explanation

Option A is the incorrect description because in a NAT gateway, each subnet in a VPC can only be bound to a single SNAT rule, not multiple. Attempting to assign more than one SNAT rule to the same subnet is not permitted, making option A a false claim.

Option B is a true statement: when the specification of an ECS instance is changed, associated NAT rules are invalidated and must be reconfigured, because the rule was tied to the original instance configuration. Option C (though the text appears truncated) correctly describes how outbound bandwidth is governed by the NAT gateway's own bandwidth specification rather than the individual cloud host's bandwidth. Option D is also true: DNAT rules (which map external traffic to internal hosts) and SNAT rules (which allow internal hosts to initiate outbound connections) are distinct rule types and must be configured separately under the NAT gateway.

Memory tip: Think of SNAT rules as "one rule per subnet" - one subnet, one SNAT. If you picture a one-to-one lock (one subnet key, one SNAT door), you will not confuse it with the incorrect idea of multiple rules per subnet.

No community discussion yet for this question.