SAA-C03 Question 246

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• 3

  Can a EC2 in the private subnet sends traffic to the internet through ELB without using NAT gateway/instance? if it's only about responses to requests coming through the ELB then no, you don't need NAT. If on the other hand you expect that your instances will need to initiate connections as oppose to just sending responses to the requests then yes, you will have to use NAT. The key point is that response to a request is not a new connection and will be sent to where it came from, i.e. to the ELB. https://serverfault.com/questions/986447/can-a-ec2-in-the-private-subnet-sends-traffic-to-the-internet-through-elb-withou

• 2

  D looks the best but still it must have a internet gateway and once it has internet gateway we must add the route table for private subnet to talk to the public subnet so by using the it should be able to access. I don't think lb can act like internet gateway

• Chose D2

  Considering these statements: -The EC2 instances are in private subnets. - However, the internet traffic is not reaching the EC2 instances. A reliable solution is D according to following link: https://repost.aws/knowledge-center/public-load-balancer-private-ec2 Answer C could not satisfy the requirements because only outbound traffic rules are mentionned