exam questions

Exam AWS-SysOps All Questions

View all questions & answers for the AWS-SysOps exam

Exam AWS-SysOps topic 1 question 111 discussion

Exam question from Amazon's AWS-SysOps
Question #: 111
Topic #: 1
[All AWS-SysOps Questions]

A user has created a VPC with CIDR 20.0.0.0/16 using the wizard. The user has created a public subnet CIDR (20.0.0.0/24. and VPN only subnets CIDR
(20.0.1.0/24. along with the VPN gateway (vgw-12345. to connect to the user's data center. Which of the below mentioned options is a valid entry for the main route table in this scenario?

  • A. Destination: 20.0.0.0/24 and Target: vgw-12345
  • B. Destination: 20.0.0.0/16 and Target: ALL
  • C. Destination: 20.0.1.0/16 and Target: vgw-12345
  • D. Destination: 0.0.0.0/0 and Target: vgw-12345
Show Suggested Answer Hide Answer
Suggested Answer: D 🗳️
The main route table came with the VPC, and it also has a route for the VPN-only subnet. A custom route table is associated with the public subnet. The custom route table has a route over the Internet gateway (the destination is 0.0.0.0/0, and the target is the Internet gateway).
If you create a new subnet in this VPC, it's automatically associated with the main route table, which routes its traffic to the virtual private gateway. If you were to set up the reverse configuration (the main route table with the route to the Internet gateway, and the custom route table with the route to the virtual private gateway), then a new subnet automatically has a route to the Internet gateway.
Reference:
http://docs.aws.amazon.com/AmazonVPC/latest/UserGuide/VPC_Route_Tables.html

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
hou0220
6 months ago
Destination—The range of IP addresses where you want traffic to go (destination CIDR) -- https://docs.aws.amazon.com/vpc/latest/userguide/VPC_Route_Tables.html#how-route-tables-work Option A, B, C the destination is within the VPC which is incorrect. Although "0.0.0.0/0" often referring to public internet, but it is a valid entry in this case.
upvoted 1 times
...
onlinebaba
6 months, 2 weeks ago
D When you use the VPC wizard in the console to create a nondefault VPC with a NAT gateway or virtual private gateway, the wizard automatically adds routes to the main route table for those gateways.
upvoted 2 times
...
awscertified
6 months, 3 weeks ago
D. Destination: 0.0.0.0/0 and Target: vgw-12345
upvoted 2 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago