Q72 — AWS SAA-C03 Ch.15

Question 72 of 100 | ← Chapter 15

Q1172. A company runs an application on Amazon EC2 instances. The application is deployed in private subnets in three Availability Zones of the us-east-1 Region. The instances must be able to connect to the internet to download files. The company wants a design that is highly available across the Region.Which solution should be implemented to ensure that there are no disruptions to internet connectivity?

Correct Answer: B. Deploy a NAT gateway in a public subnet of each Availability Zone.

Explanation

To ensure high availability for internet connectivity for EC2 instances deployed in private subnets across multiple Availability Zones in the us-east-1 Region, the best solution is:B. Deploy a NAT gateway in a public subnet of each Availability Zone.### Explanation:NAT Gateway: A NAT gateway allows instances in a private subnet to initiate outbound traffic to the internet while preventing unsolicited inbound traffic from the internet. Deploying a NAT gateway in each public subnet of the Availability Zones ensures that there is no single point of failure and maintains high availability.Public Subnets: Each NAT gateway should be placed in a public subnet to facilitate internet access while providing high availability across all Availability Zones.### Other Options:A: While deploying a NAT instance can provide similar functionality, it requires more management and does not offer the same level of scalability and redundancy as a NAT gateway.C: A transit gateway is used for connecting VPCs and on-premises networks but is not designed for providing internet access for EC2 instances in private subnets.D: An internet gateway is used to allow internet access to resources in public subnets, but it cannot be used directly by instances in private subnets.Thus, option B is the most effective solution for ensuring uninterrupted internet connectivity with high availability.