Question

Difficulty: EasyAWS Network Services

A company is setting up a new web application in an Amazon VPC. The company wants to ensure that resources within a public subnet can successfully communicate with the internet. Which two of the following configurations are required to enable this communication? (Select TWO.)

  1. An Internet Gateway attached to the Virtual Private Cloud (VPC)Answer
  2. A route in the subnet's route table that directs traffic destined for the internet (0.0.0.0/00.0.0.0/0) to the Internet GatewayAnswer
  3. C
    A Network Access Control List (NACL) configured to automatically allow return traffic statefully
  4. D
    A VPC Peering connection established directly between the VPC and the public internet
  5. E
    An Availability Zone distributed across multiple AWS Regions to handle internet traffic routing

Answer

To enable internet communication for resources in a public subnet, you must attach an Internet Gateway to the VPC and add a route in the subnet's route table that directs internet-bound traffic (0.0.0.0/00.0.0.0/0) to the Internet Gateway.
To enable internet access, the VPC must have a path to the internet via an Internet Gateway, and the subnet's route table must route destination traffic (0.0.0.0/00.0.0.0/0) to the Internet Gateway.

Step-by-Step Solution

1
Identify the VPC component that connects the VPC to the public internet.
An Internet Gateway must be attached to the VPC.
The Internet Gateway serves as the target for internet traffic and performs network address translation (NAT) for instances with public IPv4 addresses.
2
Configure the routing paths for traffic leaving the subnet.
Add a route directing 0.0.0.0/00.0.0.0/0 traffic to the attached Internet Gateway in the route table associated with the subnet.
Without this route table entry, resources in the subnet do not know how to send traffic out to the internet gateway, keeping the subnet private.

Key Concept

For resources in a VPC subnet to access the public internet, the VPC requires an attached Internet Gateway and the subnet's route table must route all non-local traffic (0.0.0.0/00.0.0.0/0) to that Internet Gateway.
Estimated Time:1m 0s
Rate this question