CLF-C02 Question 206
Select 3You are designing a Virtual Private Cloud (VPC) in AWS for a new application. The application requires private subnets for backend servers, public subnets for web servers, and connectivity to the internet. Which of the following components should you include to meet these requirements?
- A
Public subnets
- B
NAT Gateway
- C
Internet Gateway
- D
Security Group
- E
Private subnets
Show answer and explanation
Correct answers: A, C, E
Explanation
To meet the requirements, the VPC must include public subnets for web servers, private subnets for backend servers, and an Internet Gateway to provide internet connectivity for public subnets. While a NAT Gateway can facilitate internet access for resources in private subnets, it is not explicitly required in this scenario. Security Groups are essential for controlling traffic but are not part of the core VPC infrastructure components.
- A. Correct.
Public subnets are required to host resources that need direct access from the internet, such as web servers.
- B. Incorrect.
NAT Gateway enables private subnets to access the internet for updates or outbound traffic, but it is not strictly required for the architecture described in this question.
- C. Correct.
Internet Gateway is required to provide internet access for resources in public subnets.
- D. Incorrect.
Security Group is a virtual firewall for controlling inbound and outbound traffic, but it is not a core component for creating the VPC infrastructure in this scenario.
- E. Correct.
Private subnets are required to host backend servers that do not need direct access to the internet.