Examkin

Soru

Zorluk: OrtaAWS Network Services

A company is deploying a two-tier web application within an Amazon Virtual Private Cloud (Amazon VPC). The database instances are located in a private subnet and must not be directly reachable from the public internet. However, these database instances require outbound-only internet connectivity to download software updates and security patches. Which AWS networking component should be deployed to meet this requirement?

  1. A
    Network Access Control List
  2. NAT GatewayCevap
  3. C
    AWS Transit Gateway
  4. D
    Availability Zone

Cevap

NAT Gateway
A NAT Gateway is a Network Address Translation service that allows resources in a private subnet to connect to the internet (e.g., for downloading updates) but prevents external sources on the internet from initiating a connection with those resources.

Adım Adım Çözüm

1
Identify the key requirement of the database instances.
The database instances require outbound-only internet access for updates but must remain private and unreachable from the internet.
This determines that we need a translation mechanism rather than a direct public routing path.
2
Evaluate the AWS networking options for private subnet internet access.
A NAT Gateway (Network Address Translation) translates private IP addresses to a public IP to allow outbound traffic while blocking incoming requests.
This aligns perfectly with the requirement for secure, outbound-only updates.

Anahtar Kavram

NAT Gateway provides outbound-only internet connectivity to instances in a private subnet, shielding them from inbound connections.
Bu soruyu puanla

Konular

AWS Network Services

Bu konudan daha fazla soru