You need to allow resources in a private subnet to access the internet. Which of the following must be present to enable this access? (Select the best answer)单项选择题
A
NAT gateway
B
Route tables
C
Network access control lists
D
Security groups

Question

You need to allow resources in a private subnet to access the internet. Which of the following must be present to enable this access? (Select the best answer)

BlackTom AI · Accepted Answer

To enable resources in a private subnet to reach the internet, there needs to be a mechanism that translates private IP addresses to a routable public IP address for outbound traffic.

Option 1: NAT gateway. This is the correct mechanism: a NAT gateway (or NAT instance) allows instances in a private subnet to initiate outbound traffic to the internet while preventing direct inbound unsolicited traffic from the internet. It sits in a public subnet and the private subnet routes default traffic to the NAT device, which then uses the internet gateway to reach the internet. This directly answers the requirement for internet access from a private subnet.

Option 2: Route tables. Route tables themselves define where traffic goes (e.g., to the internet via an internet gateway or to a NAT), but they do not perform address translation or enable internet access by themselves. A route table must point private subnet traffic to a NAT gateway or to an internet gateway, but without NAT, outbound internet access won’t function.

Option 3: Network access control lists. NACLs are stateless rules controlling traffic at the subnet boundary. While they can permit or deny traffic, they do not perform translation or enable connectivity by themselves. Even with permissive NACLs, private instances would still need NAT for internet egress.

Option 4: Security groups. Security groups are stateful firewalls at the instance level, controlling which traffic is allowed in and out. They do not provide NAT or handle the actual routing to the internet. An instance could be restricted by its security group and still lack egress unless a NAT device and appropriate routing exist.

In summary, while route tables, NACLs, and security groups influence traffic flow and permissions, the essential component that enables private-subnet resources to access the internet is a NAT gateway, which provides the necessary address translation for outbound traffic. The other options describe important networking components, but they do not by themselves enable internet access from a private subnet.

You need to allow resources in a private subnet to access the internet. Which of the following must be present to enable this access? (Select the best answer)单项选择题

类似问题

To enable a resource in a private subnet to connect to the public Internet, which of these must be included in your VPC configuration?

Is the following statement true or false? In the products of methylation-hydrolysis, every -OH group corresponds to the position of a glycosidic bond in the starting polysaccharide.

Which of the follwoing structures represents amylopectin?

Which of the following is true about an aldopentose?I. It is a monosaccharide.II. It contains a CHO groupIII. It is a disaccharide.IV. It is an oligosaccharide.

For stock A, we have 𝛽 𝑖 = 0.70. Suppose the expected market risk premium next year is 9% and the risk-free rate is 3%. What is the expected return of this stock based on the CAPM? (Please answer in % and round to 2 decimal places. If the answer is 8.057%, then in the box, write 8.06)

更多留学生实用工具

智能学习助手

风格化写作助手

论文查重助手

文献引用助手

课堂转译助手

课堂笔记助手

Quiz搜索助手

学校历年真题

智能刷题助手

智能匹配练习

希望你的学习变得更简单