SAP-C02 · Question #848
A solutions architect has created a single VPC on AWS. The VPC has one internet gateway and one NAT gateway. The VPC extends across three Availability Zones. Each Availability Zone includes one…
The correct answer is A. Add two NAT gateways so that each Availability Zone has a NAT gateway. Configure a route. A single NAT gateway is an AZ single point of failure. Placing a NAT gateway in each Availability Zone and routing each private subnet to its local NAT gateway removes cross-AZ dependency and preserves internet egress if an AZ or NAT gateway fails.
Question
A solutions architect has created a single VPC on AWS. The VPC has one internet gateway and one NAT gateway. The VPC extends across three Availability Zones. Each Availability Zone includes one public subnet and one private subnet. The three private subnets contain Amazon EC2 instances that must be able to connect to the internet. Which solution will increase the network resiliency of this architecture?
Options
- AAdd two NAT gateways so that each Availability Zone has a NAT gateway. Configure a route
- BAdd two NAT gateways so that each Availability Zone has a NAT gateway. Configure a route
- CAdd two internet gateways so that each Availability Zone has an internet gateway. Configure a
- DAdd two internet gateways so that each Availability Zone has an internet gateway. Configure a
How the community answered
(25 responses)- A76% (19)
- B12% (3)
- C8% (2)
- D4% (1)
Explanation
A single NAT gateway is an AZ single point of failure. Placing a NAT gateway in each Availability Zone and routing each private subnet to its local NAT gateway removes cross-AZ dependency and preserves internet egress if an AZ or NAT gateway fails.
Community Discussion
No community discussion yet for this question.