SOA-C02 · Question #521
A SysOps administrator is troubleshooting a VPC with public and private subnets that leverage custom network ACLs. Instances in the private subnet are unable to access the internet. There is an…
The correct answer is A. There is a network ACL on the private subnet set to deny all outbound traffic. Network ACLs (Access Control Lists) are stateless and operate at the subnet level. If there is a network ACL on the private subnet that is configured to deny all outbound traffic, it would prevent instances in the private subnet from accessing the internet through the NAT…
Question
A SysOps administrator is troubleshooting a VPC with public and private subnets that leverage custom network ACLs. Instances in the private subnet are unable to access the internet. There is an internet gateway attached to the public subnet. The private subnet has a route to a NAT gateway that is also attached to the public subnet. The Amazon EC2 instances are associated with the default security group for the VPC. What is causing the issue in this scenario?
Options
- AThere is a network ACL on the private subnet set to deny all outbound traffic.
- BThere is no NAT gateway deployed in the private subnet of the VPC.
- CThe default security group for the VPC blocks all inbound traffic to the EC2 instances.
- DThe default security group for the VPC blocks all outbound traffic from the EC2 instances.
How the community answered
(21 responses)- A76% (16)
- B5% (1)
- C5% (1)
- D14% (3)
Explanation
Network ACLs (Access Control Lists) are stateless and operate at the subnet level. If there is a network ACL on the private subnet that is configured to deny all outbound traffic, it would prevent instances in the private subnet from accessing the internet through the NAT gateway.
Topics
Community Discussion
No community discussion yet for this question.