How would you answer an interview scenario involving Amazon VPC in AWS?

For an internet-facing API with private application and database tiers, explain subnet layout, ALB, NAT gateways, route tables, security groups, and database isolation.