AIncorrect
Region
A Region is an entire geographic area that contains multiple AZs.
It is not the unit that divides a VPC by a single AZ, so it is incorrect.
What is the unit called that divides a VPC into a range of IP addresses belonging to a single Availability Zone, where resources are placed by purpose (public or private)?
1 / 1
Select an answer
CorrectD
Explanation
A question asking which unit divides a VPC into per-AZ IP ranges.
- 1「belonging to a single Availability Zone」A subnet belongs to a single AZ
- 2「a range of IP addresses」A range that splits the VPC CIDR = a subnet
- 3「resources are placed by purpose」Using public vs. private appropriately
BIncorrect
Internet gateway
An internet gateway is a component that connects a VPC to the internet.
It is not the unit that divides into IP ranges, so it is incorrect.
CIncorrect
Security group
A security group is a firewall that controls traffic for an instance.
It is not the unit that divides a VPC into IP ranges, so it is incorrect.
DCorrect
Subnet
This is correct. A subnet is the unit that divides a VPC into a range of IP addresses belonging to a single AZ. You split it into public subnets exposed to the internet and private subnets that are not, and place resources by purpose. Each subnet belongs to a single AZ.
Key Takeaway
A subnet = the unit that divides a VPC into an IP range belonging to a single AZ. Split into public (with an IGW route) and private (no route) and place accordingly. Remember the hierarchy Region ⊃ AZ ⊃ subnet.