To enable a resource in a private subnet to connect to the public Internet, which of these must be included in your VPC configuration?

Question

To enable a resource in a private subnet to connect to the public Internet, which of these must be included in your VPC configuration?

BlackTom AI · Accepted Answer

To understand how a resource in a private subnet can reach the public Internet, we need to look at how traffic exits a VPC. 
Option 1: Amazon CloudFront — CloudFront is a content delivery network used to cache and serve content from edge locations to end users; it is not used to enable private subnets to access the Internet directly, so this is not appropriate for egress connectivity. 
Option 2: VPN — A VPN connection provides private connectivity from your on‑premises network or remote sites to a VPC, not a mechanism for private subnets to reach the Internet inherently. It does not route general Internet-bound traffic from within a VPC by default. 
Option 3: Internet Gateway — An Internet Gateway allows resources with public IP addresses in a VPC to reach the Internet and for the Internet to reach those resources. However, private subnets typically do not have public IPs; without NAT, they cannot access the Internet. This is why alone it’s not sufficient for private-subnet Internet access. 
Option 4: Network access control list (NACL) — NACLs are stateless filters that control traffic to and from subnets, but they do not perform NAT or translate addresses; on their own, they do not enable Internet access for private subnets. 
Option 5: NAT gateway — A NAT gateway provides network address translation for instances in a private subnet, enabling them to initiate outbound connections to the Internet (and receive responses) while still preventing inbound connections from the Internet. This directly solves the requirement of enabling a private subnet resource to connect to the public Internet. 
In summary, among the listed components, the NAT gateway is the mechanism that enables outbound Internet access for resources in a private subnet, by translating private IPs to a public address while maintaining the private network’s isolation. The other options either serve different purposes or do not provide the required outbound translation functionality.

To enable a resource in a private subnet to connect to the public Internet, which of these must be included in your VPC configuration?单项选择题

类似问题

You need to allow resources in a private subnet to access the internet. Which of the following must be present to enable this access? (Select the best answer)

Which ONE of the following thalamic nuclei is targeted by the trigeminothalamic tract?

Which ONE of the following is disinhibited in the direct pathway of the basal ganglia motor loop

30. What is the main purpose of the lecture?

Section FChoose a, b or c as the best answer.29. Which statement is the speaker most likely to agree with?

28. 15-minute neighbourhoods provide residents with inexpensive ____ .

27. ____ % of global car ownership is in the U.S.A.

26. ____ % of American drivers use their cars for all journeys.

更多留学生实用工具

智能学习助手

风格化写作助手

论文查重助手

文献引用助手

课堂转译助手

课堂笔记助手

Quiz搜索助手

学校历年真题

智能刷题助手

智能匹配练习

希望你的学习变得更简单