NAT Instances & NAT Gateways

Question 1

Where do you get the NAT AMI?

Answer 1

From the community AMI store (marketplace)

Question 2

Does the NAT exist within your public or private subnet?

Answer 2

Public

Question 3

What must you disable for a NAT instance to function?

Answer 3

Source and destination checks

Question 4

Must you disable source and destination checks on a NAT gateway?

Answer 4

No, only the NAT instance.

Question 5

From where do you disable the source and destination checks for the NAT instance?

Answer 5

Actions -> Change Source/Dest. Check -> Yes, Disable

Question 6

What must be modified in the route table for a NAT instance to have internet access?

Answer 6

Add a destination of 0.0.0.0/0. Add a target of the newly created NAT instance.

Question 7

What is the difference between NAT Gateway and Egress only Internet Gateway?

Answer 7

NAT Gateway is for IPv4

Egress Only Internet Gateway is specialized for IPv6

Question 8

When you create a NAT Gateway, do you associate your public or private subnet?

Answer 8

Public

Question 9

After you create a NAT Gateway, you attempt to create new route tables, but you can’t. What is the likely problem?

Answer 9

NAT Gateways can take up to 15 minutes to provision. Wait 15 minutes and try again.

Question 10

Similar to NAT Instances, what must be added to a route table for the Gateway to have internet access?

Answer 10

The route table must include a destination of 0.0.0.0/0, and a target or the newly created NAT Gateway

Question 11

True or False: NAT Gateways do not span subnets?

Answer 11

True. You must create a NAT Gateway in each subnet where it’s needed.

Question 12

In terms of availability and scalability, what benefits does a NAT Gateway have over a NAT Instance?

Answer 12

1. Gateways auto scale to meet demand. NAT Instances must be managed with auto scaling groups.

Question 13

True or false: There must be a route out of the private subnet for NATs to work?

Answer 13

True

Question 14

True or false: For a NAT instance, the amount of traffic it can handle depends on the instance size?

Answer 14

True. Keep an eye on the network traffic when using a NAT instance.

Question 15

Do NAT instances sit behind a security group?

Answer 15

Yes

Question 16

Are NAT Gateways or NAT instances prefered by enterprise organizations?

Answer 16

NAT Gateway

Question 17

How much network bandwidth will a NAT Gateway scale up to?

Answer 17

10Gbps

Question 18

In the shared responsibility model, who is responsible for the availabiltiy of NAT Gateways?

Answer 18

AWS

Question 19

In the shared responsibility model, who is responsible for the availabiltiy of NAT Instances?

Answer 19

The customer

Question 20

Are NAT Gateways associated to a security group?

Answer 20

No

Question 21

True or False: WIth a NAT Gateway, don’t forget to assign a public IP address

Answer 21

False: A public IP address is automatically assigned.

Question 22

When there’s a problem with a NAT Gateway, are you able to SSH in to troubleshoot the issue?

Answer 22

No. NAT Gateway is fully managed by AWS.

Question 23

Must you disable the source/dest. checks with a NAT Gateway?

Answer 23

No.