SAA-C03 Q299 · Networking

Question

A company runs an application on Amazon EC2 instances. The application is deployed in private subnets in three Availability Zones of the us-east-1 Region. The instances must be able to connect to the internet to download files. The company wants a design that is highly available across the Region. Which solution should be implemented to ensure that there are no disruptions to internet connectivity?

Accepted Answer

**Option B: Deploy a NAT gateway in a public subnet of each Availability Zone** is correct because it satisfies every requirement:

1. **Private subnet internet access**: NAT gateways provide outbound internet connectivity for instances in private subnets. Instances send traffic to the NAT gateway, which translates the private IP to its own Elastic IP and forwards traffic to the internet gateway. Return traffic is routed back.

2. **Public subnet placement**: NAT gateways **must** be deployed in a public subnet (one that has a route to an internet gateway). This is a fundamental architectural requirement — the NAT gateway itself needs internet access to relay traffic.

3. **High availability across the Region**: By deploying one NAT gateway per Availability Zone (3 AZs in this case), you e

📖 Explanation

✅ Correct Answer

❌ Wrong Answers

📘 Key Concepts

🏗️ Architecture

⚙️ Operations

💰 Cost

🔒 Security

🎯 Exam Tips