Q1. Which component of a VPC is used to allow internet traffic to flow in and out of a public subnet?
A. NAT Gateway
B. Security Group
C. Internet Gateway
D. Route Table
Q2. What is the primary difference between a Security Group and a Network ACL in AWS?
A. Security Groups are stateless; Network ACLs are stateful
B. Security Groups are stateful; Network ACLs are stateless
C. Both are stateful
D. Both are stateless
Q3. A private subnet needs to download software updates without being directly reachable from the internet. Which service enables this?
A. Internet Gateway
B. VPC Peering
C. NAT Gateway
D. Elastic IP