[Solved] An instance in a private subnet cannot reach the internet. The route table has:Destination: 0.0.0.0/0, Target: nat-abc123What could be the problem? | AWS

AWS - VPC Fundamentals

An instance in a private subnet cannot reach the internet. The route table has:
Destination: 0.0.0.0/0, Target: nat-abc123
What could be the problem?

AThe subnet has a route to an internet gateway.

BThe instance has a public IP assigned.

CThe security group allows all outbound traffic.

DThe NAT device is in a private subnet without internet access.

Step-by-Step Solution

Solution:

Step 1: Check NAT device placement
The NAT device must be in a public subnet with internet access to forward traffic.
Step 2: Identify issue
If the NAT is in a private subnet without IGW access, it cannot route traffic to the internet.
Final Answer:
The NAT device is in a private subnet without internet access. -> Option D
Quick Check:
NAT must be in public subnet for internet access [OK]

Quick Trick: NAT device must be in public subnet [OK]

Common Mistakes:

Assigning public IP to private subnet instance
Confusing route table targets
Ignoring security group outbound rules

Master "VPC Fundamentals" in AWS

9 interactive learning modes - each teaches the same concept differently

Learn Why Deep Visual Try Challenge Project Recall Time

More AWS Quizzes

An instance in a private subnet cannot reach the internet. The route table has:

Step 1: Check NAT device placement

Step 2: Identify issue

Final Answer:

Quick Check:

Want More Practice?