Your company plans to set up a VPC with private and public subnets and host EC2 Instances in the subnet. It has to be ensured that instances in the private subnet can download updates from the internet. Which of the following needs to be part of the architecture for this requirement?

Answer options:

A.WAF
B.Direct Connect
C.NAT Gateway
D.VPN

Answer – C
The AWS Documentation mentions the following.
You can use a network address translation (NAT) gateway to enable instances in a private subnet to connect to the internet or other AWS services. But you prevent the internet from initiating a connection with those instances.
Option A is invalid since this is a web application firewall.
Options B and D are invalid since they are used to connect on-premises infrastructure to AWS VPCs.
For more information on NAT gateway, please visit the below URL-
https://docs.aws.amazon.com/AmazonVPC/latest/UserGuide/vpc-nat-gateway.html