QuestionQ151
Network DesignA company configured a NAT gateway in one Availability Zone (AZ1) in a VPC (VPC1) so that Amazon EC2 workloads in the VPC can access the internet. The EC2 workloads run in private subnets across three Availability Zones (AZ1, AZ2, and AZ3). Each subnet’s route table is configured to use the NAT gateway for internet access.
During a recent outage, the EC2 workloads lost internet connectivity because the NAT gateway became unavailable. A network engineer must implement a solution that eliminates the architecture’s single point of failure and provides built-in redundancy.
Which solution meets these requirements?
- A Set up two NAT gateways. Place each NAT gateway in a different public subnet in separate Availability Zones (AZ2 and AZ3). Configure a route table for private subnets to route traffic to the virtual IP addresses of the two NAT gateways.
- B Set up two NAT gateways. Place each NAT gateway in a different public subnet in separate Availability Zones (AZ2 and AZ3). Configure a route table to point the AZ2 private subnets to the NAT gateway in AZ2. Configure the same route table to point the AZ3 private subnets to the NAT gateway in AZ3.
- C Create a second VPC (VPC2). Set up two NAT gateways. Place each NAT gateway in a different VPC (VPC1 and VPC2) and in the same Availability Zone (AZ2). Configure a route table in VPC1 to point the AZ2 private subnets to one NAT gateway. Configure a route table in VPC2 to point the AZ2 private subnets to the second NAT gateway.
- D Set up two NAT gateways. Place each NAT gateway in a different public subnet in separate Availability Zones (AZ2 and AZ3). Configure a route table to point the AZ2 private subnets to the NAT gateway in AZ2. Configure a second route table to point the AZ3 private subnets to the NAT gateway in AZ3.
Community Discussion