SOA-C02 · Question #732
A company deploys non-production Amazon EC2 instances in a VPC that has an internet gateway attached. The VPC has a single public subnet and a single private subnet. The EC2 instances in the private…
The correct answer is B. Create a NAT gateway in the public subnet. Create an entry in the route table that is associated. Place a NAT gateway in the public subnet and add a 0.0.0.0/0 route in the private subnet’s route table pointing to that NAT gateway. This lets instances in the private subnet initiate outbound internet traffic while remaining unreachable from the internet.
Question
A company deploys non-production Amazon EC2 instances in a VPC that has an internet gateway attached. The VPC has a single public subnet and a single private subnet. The EC2 instances in the private subnet cannot communicate outbound to the internet. Which action will give the EC2 instances in the private subnet the ability to communicate outbound to the internet?
Options
- ACreate a NAT gateway in the private subnet. Route traffic from the NAT gateway to the internet
- BCreate a NAT gateway in the public subnet. Create an entry in the route table that is associated
- CCreate an entry in the route table that is associated with the private subnet. Specify 0.0.0.0/0 as
- DCreate a second internet gateway. Associate the second internet gateway with the private subnet.
How the community answered
(21 responses)- A5% (1)
- B81% (17)
- C5% (1)
- D10% (2)
Explanation
Place a NAT gateway in the public subnet and add a 0.0.0.0/0 route in the private subnet’s route table pointing to that NAT gateway. This lets instances in the private subnet initiate outbound internet traffic while remaining unreachable from the internet.
Topics
Community Discussion
No community discussion yet for this question.