ANS-C01 Network Design Practice Question
A company is designing a VPC architecture for a web application that must be highly available across multiple Availability Zones. Which TWO components should be deployed in at least two Availability Zones to meet this requirement?
⚠ Common exam trap
Watch out — candidates often assume NAT Gateway is a regional service like Internet Gateway, but it is actually AZ-specific and requires explicit deployment in each AZ for high availability, while the Application Load Balancer requires subnets in multiple AZs to be considered highly available.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
NAT Gateway
A NAT Gateway is a regional resource that is deployed within a specific Availability Zone, but to achieve high availability across multiple AZs, you must deploy a NAT Gateway in each AZ used by your application. This ensures that if one AZ fails, instances in other AZs can still access the internet or other AWS services through their local NAT Gateway, preventing a single point of failure.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Transit Gateway
Why it's wrong here
Transit Gateway is a regional service, not per AZ.
- ✗
Internet Gateway
Why it's wrong here
Internet Gateway is a redundant service per VPC, not per AZ.
- ✓
NAT Gateway
Why this is correct
NAT Gateway is deployed in a specific AZ; multiple AZs needed for HA.
- ✓
Application Load Balancer (with subnets in multiple AZs)
Why this is correct
ALB is regional but must have subnets in multiple AZs to be HA.
- ✗
VPN connection
Why it's wrong here
VPN connection is a resource per VPC, not per AZ.
Visual reference
Go deeper
Related to this question
About these practice questions
This ANS-C01 question is part of Courseiva's 1,621-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This ANS-C01 practice question is part of Courseiva's free Amazon Web Services certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the ANS-C01 exam.