AWS Certified Solutions Architect Professional SAP-C02 Practice Question
A solutions architect is reviewing the architecture of a critical document processing system for a financial services company. The system uses a fleet of EC2 instances running in an Auto Scaling group across three Availability Zones (AZs) in the us-east-1 region. These instances are in private subnets and are responsible for processing sensitive documents. For outbound internet access to a partner's API, all traffic from these private subnets is routed through a single, large EC2 instance configured as a NAT instance, located in a public subnet in us-east-1a. During a recent operational review, it was noted that there are periods where the processing jobs fail due to an inability to connect to the partner API, even though the EC2 worker instances and the partner's service are reported as healthy. Which component of this architecture represents the most significant single point of failure (SPOF) that needs to be remediated to improve reliability?
The Auto Scaling group configuration for the EC2 worker fleet.
The use of a single Amazon S3 bucket for document ingestion.
The single NAT instance in us-east-1a.
The Amazon SQS queue used for decoupling the processing tasks.
The correct answer is the single NAT instance. A single NAT instance represents a classic single point of failure (SPOF). If the EC2 instance itself fails or the Availability Zone it resides in (us-east-1a) experiences an issue, all outbound internet connectivity for the EC2 instances in all three private subnets will be lost. This directly explains the intermittent connectivity failures. The most reliable solution is to replace the self-managed NAT instance with AWS-managed NAT Gateways. To achieve high availability, a NAT Gateway should be deployed in each Availability Zone, and the route tables for the private subnets in each AZ should be configured to direct outbound traffic to the NAT Gateway in their respective AZ.
The Auto Scaling group is configured correctly across multiple AZs, which is a design pattern for high availability, not a point of failure.
Amazon S3 is an inherently highly available and durable regional service that replicates data across a minimum of three AZs by default for standard storage classes. It does not represent a SPOF in this context.
Amazon SQS is a fully managed, distributed message queue service that redundantly stores messages across multiple AZs to ensure high availability. It is a component that increases reliability, not one that introduces a SPOF.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
What is a NAT instance and why is it considered a SPOF?
Open an interactive chat with Bash
What is the advantage of using AWS NAT Gateway over a NAT instance?
Open an interactive chat with Bash
How can we improve the high availability of a NAT Gateway setup?
Open an interactive chat with Bash
AWS Certified Solutions Architect Professional SAP-C02
Continuous Improvement for Existing Solutions
Your Score:
Report Issue
Bash, the Crucial Exams Chat Bot
AI Bot
Loading...
Loading...
Loading...
IT & Cybersecurity Package Join Premium for Full Access