nerdexam
Amazon

SAA-C03 · Question #499

A company runs an application on Amazon EC2 instances. The application is deployed in private subnets in three Availability Zones of the us-east-1 Region. The instances must be able to connect to…

The correct answer is B. Deploy a NAT gateway in a public subnet of each Availability Zone. To allow private subnets to access the internet, deploy NAT gateways in a public subnet in each AZ for high availability. NAT instances are less scalable and less fault-tolerant. "To create a highly available architecture, create a NAT gateway in each Availability Zone and…

Submitted by deeparc· Mar 4, 2026Design Resilient Architectures

Question

A company runs an application on Amazon EC2 instances. The application is deployed in private subnets in three Availability Zones of the us-east-1 Region. The instances must be able to connect to the internet to download files. The company wants a design that is highly available across the Region. Which solution should be implemented to ensure that there are no disruptions to internet connectivity?

Options

  • ADeploy a NAT instance in a private subnet of each Availability Zone.
  • BDeploy a NAT gateway in a public subnet of each Availability Zone.
  • CDeploy a transit gateway in a private subnet of each Availability Zone.
  • DDeploy an internet gateway in a public subnet of each Availability Zone.

How the community answered

(48 responses)
  • A
    6% (3)
  • B
    88% (42)
  • C
    4% (2)
  • D
    2% (1)

Explanation

To allow private subnets to access the internet, deploy NAT gateways in a public subnet in each AZ for high availability. NAT instances are less scalable and less fault-tolerant. "To create a highly available architecture, create a NAT gateway in each Availability Zone and configure your routing to use it."

Community Discussion

No community discussion yet for this question.

Full SAA-C03 Practice