Exam AWS Certified Solutions Architect - Professional topic 1 question 102 discussion

Exam question from Amazon's AWS Certified Solutions Architect - Professional

Question #: 102
Topic #: 1

[All AWS Certified Solutions Architect - Professional Questions]

After launching an instance that you intend to serve as a NAT (Network Address Translation) device in a public subnet you modify your route tables to have the
NAT device be the target of internet bound traffic of your private subnet. When you try and make an outbound connection to the internet from an instance in the private subnet, you are not successful.
Which of the following steps could resolve the issue?

A. Disabling the Source/Destination Check attribute on the NAT instance
B. Attaching an Elastic IP address to the instance in the private subnet
C. Attaching a second Elastic Network Interface (ENI) to the NAT instance, and placing it in the private subnet
D. Attaching a second Elastic Network Interface (ENI) to the instance in the private subnet, and placing it in the public subnet

Show Suggested Answer

Suggested Answer: A 🗳️
Reference:
http://docs.aws.amazon.com/workspaces/latest/adminguide/gsg_create_vpc.html

by CloudFloater at Jan. 19, 2020, 10:41 p.m.

Disclaimers:

- ExamTopics website is not related to, affiliated with, endorsed or authorized by Amazon.
- Trademarks, certification & product names are used for reference only and belong to Amazon.

Comments

Submit Cancel

CloudFloater

Highly Voted 3 years, 7 months ago

obvious answer: A but, if u want to research more: http://jayendrapatil.com/aws-vpc-nat/

upvoted 8 times

...

kuroro

Highly Voted 3 years, 6 months ago

Disable source/destination checks Each EC2 instance performs source/destination checks by default. This means that the instance must be the source or destination of any traffic it sends or receives. However, a NAT instance must be able to send and receive traffic when the source or destination is not itself. Therefore, you must disable source/destination checks on the NAT instance. https://docs.aws.amazon.com/vpc/latest/userguide/VPC_NAT_Instance.html

upvoted 5 times

...