A Development team has built an experimental environment to test a simple stale web application It has built an isolated VPC with a private and a public subnet. The public subnet holds only an Application Load Balancer a NAT gateway, and an internet gateway. The private subnet holds ail of the Amazon EC2 instances.
There are 3 different types of servers Each server type has its own Security Group that limits access lo only required connectivity. The Security Groups nave both inbound and outbound rules applied Each subnet has both inbound and outbound network ACls applied to limit access to only required connectivity.
Which of the following should the team check if a server cannot establish an outbound connection to the internet? (Select THREE.)
- The route tables and the outbound rules on the appropriate private subnet security group.
- The outbound network ACL rules on the private subnet and the Inbound network ACL rules on the public subnet.
- The outbound network ACL rules on the private subnet and both the inbound and outbound rules on the public subnet.
- The rules on any host-based firewall that may be applied on the Amazon EC2 instances.
- The Security Group applied to the Application Load Balancer and NAT gateway.
- That the 0.0.0./0 route in the private subnet route table points to the internet gateway in the public subnet.
Answer(s): C,E,F
Explanation:
because these are the factors that could affect the outbound connection to the internet from a server in a private subnet. The outbound network ACL rules on the private subnet and both the inbound and outbound rules on the public subnet must allow the traffic to pass through8. The security group applied to the application load balancer and NAT gateway must also allow the traffic from the private subnet9. The 0.0.0.0/0 route in the private subnet route table must point to the NAT gateway in the public subnet, not the internet gateway10. The other options are either irrelevant or incorrect for troubleshooting the outbound connection issue.