Oracle Cloud Infrastructure 2020 Architect Professional — Question 3

You are helping a customer troubleshoot a problem. The customer has several Oracle Linux servers in a private subnet within a Virtual Cloud Network (VCN). The servers are configured to periodically communicate to the Internet to get security patches for applications installed on them.
The servers are unable to reach the internet. An Internet Gateway has been deployed in the public subnet in the VCN and the appropriate routes are configured in the Route Table associated with the public subnet.
Based on cost considerations, which option will fix this issue? (Choose the best answer)

Answer options

• A. Create a NAT gateway in the VCN and configure the NAT gateway as the route target for the private subnet.
• B. Create another Internet Gateway and configure it as route target for the private subnet.
• C. Create a Public Load Balancer in front of the servers and add the servers to the Backend Set of the Public Load Balancer.
• D. Implement a NAT instance in the public subnet of the VCN and configure the NAT instance as the route target for the private subnet.

Correct answer: A

Explanation

The correct answer is A because creating a NAT gateway allows the private subnet servers to access the internet for updates while keeping them secure from direct exposure. Options B and C do not provide a suitable solution for private subnet communication to the internet, and option D, while functional, is typically less cost-effective than using a NAT gateway.