CLF-C02 Question 204
Select 3You are designing a Virtual Private Cloud (VPC) for a new application in AWS. The application requires private subnets for backend servers and public subnets for web servers. Which of the following components must be included in your VPC design to allow the web servers to communicate with the internet while keeping the backend servers private?
- A
Internet Gateway
- B
NAT Gateway
- C
Route Table
- D
Elastic Load Balancer
- E
VPC Peering Connection
Show answer and explanation
Correct answers: A, B, C
Explanation
To meet the requirements of the scenario, the VPC must include an Internet Gateway for public subnet internet access, a NAT Gateway for private subnet instances to access the internet without being directly exposed, and Route Tables to define the traffic routing. These components work together to ensure proper communication and isolation between public and private subnets.
- A. Correct.
An Internet Gateway is required to enable resources in the public subnets to communicate with the internet.
- B. Correct.
A NAT Gateway is used to allow instances in the private subnets to access the internet for updates or patches without exposing them to inbound internet traffic.
- C. Correct.
A Route Table is necessary to define how traffic is directed within the VPC, including routes for internet access through the Internet Gateway or NAT Gateway.
- D. Incorrect.
An Elastic Load Balancer is used for distributing traffic across multiple instances but is not required for basic internet connectivity or subnet isolation.
- E. Incorrect.
VPC Peering Connection is used to connect two VPCs, which is unrelated to the requirement of internet access or subnet isolation in this scenario.