Question

A retail company is designing the network architecture for a new customer-facing web application in a public cloud VPC. Internet users must be able to reach the application's load balancer, but the application servers themselves should never be directly reachable from the internet. The architecture team must decide where to place the internet-facing load balancer and the application servers. Which design meets these requirements?

Accepted Answer

Place the internet-facing load balancer in a public subnet with a route to an internet gateway, and place the application servers in private subnets

Answer

Place both the load balancer and the application servers in public subnets so traffic can flow freely between them

Answer

Place the load balancer in a private subnet and assign public IP addresses to each application server

Answer

Place both the load balancer and the application servers in private subnets and rely on a NAT gateway for all inbound customer traffic