ANS-C01 Network Design Practice Question

Which THREE factors should be considered when designing a VPC for a multi-tier application that requires high availability and security? (Choose three.)

⚠ Common exam trap

AWS often tests the misconception that high availability can be achieved within a single Availability Zone by using redundant components, but the correct approach requires at least two AZs to survive an AZ-level failure.

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

✓

Provision subnets in at least two Availability Zones

Deploying subnets across at least two Availability Zones (AZs) ensures high availability by eliminating a single point of failure. If one AZ experiences an outage, the application can continue serving traffic from the other AZ. This is a foundational principle for building fault-tolerant architectures in AWS.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

✓
Provision subnets in at least two Availability Zones
Why this is correct
Provides high availability in case of AZ failure.
✗
Assign public IP addresses to all instances for direct access
Why it's wrong here
Public IPs increase attack surface.
✓
Use separate subnets for web, application, and database tiers
Why this is correct
Improves security through network segmentation.
✗
Use a single Availability Zone to reduce latency
Why it's wrong here
Single AZ does not provide high availability.
✓
Use NAT Gateways in public subnets for outbound internet access from private subnets
Why this is correct
Allows private instances to reach the internet for updates.

Visual reference

Go deeper

ANS-C01 Network Design Practice Question

Why each option matters

Option-by-option breakdown

Related to this question