You need to allow resources in a private subnet to access the internet. Which of the following must be present to enable this access? (Select the best answer)Single choice
A
NAT gateway
B
Route tables
C
Network access control lists
D
Security groups

Question

You need to allow resources in a private subnet to access the internet. Which of the following must be present to enable this access? (Select the best answer)

BlackTom AI · Accepted Answer

To enable resources in a private subnet to reach the internet, there needs to be a mechanism that translates private IP addresses to a routable public IP address for outbound traffic.

Option 1: NAT gateway. This is the correct mechanism: a NAT gateway (or NAT instance) allows instances in a private subnet to initiate outbound traffic to the internet while preventing direct inbound unsolicited traffic from the internet. It sits in a public subnet and the private subnet routes default traffic to the NAT device, which then uses the internet gateway to reach the internet. This directly answers the requirement for internet access from a private subnet.

Option 2: Route tables. Route tables themselves define where traffic goes (e.g., to the internet via an internet gateway or to a NAT), but they do not perform address translation or enable internet access by themselves. A route table must point private subnet traffic to a NAT gateway or to an internet gateway, but without NAT, outbound internet access won’t function.

Option 3: Network access control lists. NACLs are stateless rules controlling traffic at the subnet boundary. While they can permit or deny traffic, they do not perform translation or enable connectivity by themselves. Even with permissive NACLs, private instances would still need NAT for internet egress.

Option 4: Security groups. Security groups are stateful firewalls at the instance level, controlling which traffic is allowed in and out. They do not provide NAT or handle the actual routing to the internet. An instance could be restricted by its security group and still lack egress unless a NAT device and appropriate routing exist.

In summary, while route tables, NACLs, and security groups influence traffic flow and permissions, the essential component that enables private-subnet resources to access the internet is a NAT gateway, which provides the necessary address translation for outbound traffic. The other options describe important networking components, but they do not by themselves enable internet access from a private subnet.

You need to allow resources in a private subnet to access the internet. Which of the following must be present to enable this access? (Select the best answer)Single choice

Similar Questions

To enable a resource in a private subnet to connect to the public Internet, which of these must be included in your VPC configuration?

How did Egyptian culture and governance change during the Ptolemaic period compared to the pharaonic period?

Name the Supreme Court decision that removed financial constraints on PACs.

Political scientists Joshua Kalla and David Broockman find that senior policy makers made themselves available to _____ between three and four times more often than they did to constituents.

Name the political scientist who argues that parties are designed to serve the needs of ambitious politicians (namely candidates and officeholders).

Name the political scientist who said this famous quote about the problems of pluralism: “The flaw in the pluralist heaven is that the heavenly choir sings with a strong upper-class accent.”

What is the name of the third party candidate in 2000 who was not allowed to participate in the presidential debates? Hint: We watched a video clip with him in class.

E.E. Schattshneider said, "Democracy is ________ save in terms of the parties."

More Practical Tools for Students Powered by AI Study Helper

Homework AI Solver

Stylized AI Paper Writer

Plagiarism Checker Assistant

Citation AI Academic Writing Tool

In-Class Translation Assistant

AI Note Generator

AI Quiz Answers

Past Exam Questions from University Test Bank

Smart Practice Assistant

Adaptive Practice

Making Your Study Simpler