You need to allow resources in a private subnet to access the internet. Which of the following must be present to enable this access? (Select the best answer)单项选择题
A
NAT gateway
B
Route tables
C
Network access control lists
D
Security groups

Question

You need to allow resources in a private subnet to access the internet. Which of the following must be present to enable this access? (Select the best answer)

BlackTom AI · Accepted Answer

To enable resources in a private subnet to reach the internet, there needs to be a mechanism that translates private IP addresses to a routable public IP address for outbound traffic.

Option 1: NAT gateway. This is the correct mechanism: a NAT gateway (or NAT instance) allows instances in a private subnet to initiate outbound traffic to the internet while preventing direct inbound unsolicited traffic from the internet. It sits in a public subnet and the private subnet routes default traffic to the NAT device, which then uses the internet gateway to reach the internet. This directly answers the requirement for internet access from a private subnet.

Option 2: Route tables. Route tables themselves define where traffic goes (e.g., to the internet via an internet gateway or to a NAT), but they do not perform address translation or enable internet access by themselves. A route table must point private subnet traffic to a NAT gateway or to an internet gateway, but without NAT, outbound internet access won’t function.

Option 3: Network access control lists. NACLs are stateless rules controlling traffic at the subnet boundary. While they can permit or deny traffic, they do not perform translation or enable connectivity by themselves. Even with permissive NACLs, private instances would still need NAT for internet egress.

Option 4: Security groups. Security groups are stateful firewalls at the instance level, controlling which traffic is allowed in and out. They do not provide NAT or handle the actual routing to the internet. An instance could be restricted by its security group and still lack egress unless a NAT device and appropriate routing exist.

In summary, while route tables, NACLs, and security groups influence traffic flow and permissions, the essential component that enables private-subnet resources to access the internet is a NAT gateway, which provides the necessary address translation for outbound traffic. The other options describe important networking components, but they do not by themselves enable internet access from a private subnet.

You need to allow resources in a private subnet to access the internet. Which of the following must be present to enable this access? (Select the best answer)单项选择题

类似问题

To enable a resource in a private subnet to connect to the public Internet, which of these must be included in your VPC configuration?

Name the Supreme Court decision that removed financial constraints on PACs.

Political scientists Joshua Kalla and David Broockman find that senior policy makers made themselves available to _____ between three and four times more often than they did to constituents.

Name the political scientist who argues that parties are designed to serve the needs of ambitious politicians (namely candidates and officeholders).

Name the political scientist who said this famous quote about the problems of pluralism: “The flaw in the pluralist heaven is that the heavenly choir sings with a strong upper-class accent.”

What is the name of the third party candidate in 2000 who was not allowed to participate in the presidential debates? Hint: We watched a video clip with him in class.

E.E. Schattshneider said, "Democracy is ________ save in terms of the parties."

Who was the most recently appointed justice to the Supreme Court?

更多留学生实用工具

智能学习助手

风格化写作助手

论文查重助手

文献引用助手

课堂转译助手

课堂笔记助手

Quiz搜索助手

学校历年真题

智能刷题助手

智能匹配练习

希望你的学习变得更简单