Which components constitute core cloud networking, and what are the primary security considerations?

• A. VPC/vNET create isolated networks; subnets segment resources; gateways enable internet or on-prem connectivity; NAT hides internal IPs; VPN connects on-prem to cloud; peering links networks. Security: security groups/firewall rules, network ACLs, segmentation, encryption in transit, least privilege access.
• B. Gateways are optional
• C. NAT alone provides full security
• D. Subnets alone determine security posture

Answer: (A)

In cloud networking, you start with an isolated virtual network and subdivide it with subnets to organize resources, then connect that network to the internet or to on‑premises using gateways, NAT, VPN, and peering. Gateways provide the paths for external reach—an internet gateway for public access and a VPN gateway or dedicated connection for on‑premises links. NAT lets outbound connectivity while keeping internal IPs hidden. VPNs and peering establish secure links either to on‑premises networks or between cloud networks, enabling private communication.

Security is layered across these components. Security groups or firewall rules control what traffic is allowed to enter or leave individual resources. Network ACLs operate at the subnet boundary to filter traffic flowing in and out of a subnet. Segmentation helps limit the blast radius by keeping workloads isolated where appropriate. Encryption in transit protects data as it moves between components and networks. Least‑privilege access ensures only authorized users and services can modify networking and security configurations. Together, these elements provide both the connectivity you need and the controls that protect data and resources.

Saying gateways are optional, or that NAT alone provides full security, or that subnets alone determine security posture misses important nuances. Gateways are commonly needed to reach external networks; NAT does not by itself secure traffic beyond obscuring internal addresses; and security posture depends on multiple controls in concert—network boundaries, firewalling, segmentation, encryption, and access control—not subnets alone.