AWS Certified Solutions Architect Associate · Free Practice Question Medium
Question 31
While troubleshooting, a cloud architect realized that the Amazon EC2 instance is unable to connect to the internet using the Internet Gateway.
Which conditions should be met for internet connectivity to be established? (Select two)
-
A
The network access control list (network ACL) associated with the subnet must have rules to allow inbound and outbound traffic
-
B
The instance's subnet is not associated with any route table
-
C
The instance's subnet is associated with multiple route tables with conflicting configurations
-
D
The route table in the instance’s subnet should have a route to an Internet Gateway
-
E
The subnet has been configured to be public and has no access to the internet
Reveal correct answers
Correct answers: A, D
Explanation
Correct options:
The network access control list (network ACL) associated with the subnet must have rules to allow inbound and outbound traffic
The network access control list (network ACL) that is associated with the subnet must have rules to allow inbound and outbound traffic on port 80 (for HTTP traffic) and port 443 (for HTTPs traffic). This is a necessary condition for Internet Gateway connectivity.
The route table in the instance’s subnet should have a route to an Internet Gateway
A route table contains a set of rules, called routes, that are used to determine where network traffic from your subnet or gateway is directed. The route table in the instance’s subnet should have a route defined to the Internet Gateway.
Incorrect options:
The instance's subnet is not associated with any route table - This is an incorrect statement. A subnet is implicitly associated with the main route table if it is not explicitly associated with a particular route table. So, a subnet is always associated with some route table.
The instance's subnet is associated with multiple route tables with conflicting configurations - This is an incorrect statement. A subnet can only be associated with one route table at a time.
The subnet has been configured to be public and has no access to the internet - This is an incorrect statement. Public subnets have access to the internet via Internet Gateway.
Reference:
https://docs.aws.amazon.com/vpc/latest/userguide/VPC_Route_Tables.html
Discussion
Think the marked answer is wrong, or have a better explanation? Share it below — comments appear after review.
