NSE7_PBC-7.2 · Question #17
Refer to the exhibit. In your Amazon Web Services (AWS) virtual private cloud (VPC), you must allow outbound access to the internet and upgrade software on an EC2 instance, without using a NAT…
The correct answer is D. Deploy a NAT gateway with an EIP in the public subnet, edit route tables, select Private-route. AWS NAT gateway allows instances in a private subnet to connect to the internet or other AWS services without using NAT instance. the main routing table sends internet traffic from the private subnet instances to the NAT gateway, then NAT gateway sends traffic to the IGW using…
Question
Refer to the exhibit. In your Amazon Web Services (AWS) virtual private cloud (VPC), you must allow outbound access to the internet and upgrade software on an EC2 instance, without using a NAT instance. This specific EC2 instance is running in a private subnet: 10.0.1.0/24. Also, you must ensure that the EC2 instance source IP address is not exposed to the public internet. There are two subnets in this VPC in the same availability zone, named public (10.0.0.0/24) and private (10.0.1.0/24). How do you achieve this outcome with minimum configuration?
Exhibit
Options
- ADeploy a NAT gateway with an EIP in the private subnet, edit the public main routing table,
- BDeploy a NAT gateway with an EIP in the public subnet, edit route tables, select Public-route,
- CDeploy a NAT gateway with an EIP in the private subnet, edit route tables, select Private-
- DDeploy a NAT gateway with an EIP in the public subnet, edit route tables, select Private-route
How the community answered
(24 responses)- A4% (1)
- B17% (4)
- C8% (2)
- D71% (17)
Explanation
AWS NAT gateway allows instances in a private subnet to connect to the internet or other AWS services without using NAT instance. the main routing table sends internet traffic from the private subnet instances to the NAT gateway, then NAT gateway sends traffic to the IGW using the source IP address of the elastic IP address. Deploy a NAT gateway with an EIP in the public subnet, edit route tables, select Private-route and add a new route destination 0.0.0.0/0 to target the NAT gateway.
Topics
Community Discussion
No community discussion yet for this question.