Clyde has just configured a web server as the first virtual machine on the cloud. Which must he configure to make the web server reachable by users around the world?

• A. NAT Gateway
• B. Internet Gateway
• C. Firewall
• D. Load Balancer

Answer: (B)

To make a web server reachable from anywhere on the internet, there must be a path from the internet into your cloud network. An Internet Gateway provides that direct connection between your virtual private cloud and the public internet, allowing traffic from anywhere to reach resources in the VPC when the proper route and public addressing are in place. Attach the Internet Gateway to the VPC, configure a default route (0.0.0.0/0) to that gateway, and give the web server a public IP (or Elastic IP) so it can be addressed publicly.

NAT Gateway, in contrast, lets private-subnet instances reach the internet for outbound traffic but does not enable inbound access from the internet. A firewall controls traffic but does not create the actual connectivity path. A load balancer can expose services and distribute traffic, but you still need an internet-facing path to the VPC; for a single VM, the Internet Gateway is the fundamental piece to enable global reach.