Correct Answer: Deploy a NAT Gateway in the public subnet and update the private subnet's route table to point 0.0.0.0/0 to the NAT Gateway
NAT (Network Address Translation) Gateways allow private instances to initiate outbound connections to the internet while blocking unsolicited inbound connections....
Correct Answer
Deploy a NAT Gateway in the public subnet and update the private subnet's route table to point 0.0.0.0/0 to the NAT Gateway
Why This Answer Is Correct
NAT (Network Address Translation) Gateways allow private instances to initiate outbound connections to the internet while blocking unsolicited inbound connections.
This question evaluates your knowledge of Amazon VPC — a core concept tested in AWS Certified Solutions Architect – Associate (SAA-C03). Understanding Amazon VPC is essential for designing scalable, secure, and cost-effective cloud architectures. Mastery of this topic will help you answer scenario-based questions confidently on exam day.
You need to create a logically isolated section of your cloud environment where you can launch resources in a virtual network that you define. Which service provides this?
A company wants to connect 50 different VPCs across multiple AWS accounts in a single region to a central VPC that contains shared services. The architecture must be scalable and minimize the complexity of manageability. Which service is best?
What is the primary benefit of using a 'VPC Endpoint' (Gateway or Interface) for services like S3 or DynamoDB?
A company has two VPCs in different AWS regions and needs them to communicate using private IP addresses. Which solution provides the lowest latency and uses the AWS backbone network?
An architect needs to capture information about the IP traffic going to and from network interfaces in a VPC for security analysis. Which feature should be enabled?