exam questions

Exam ANS-C00 All Questions

View all questions & answers for the ANS-C00 exam

Exam ANS-C00 topic 1 question 150 discussion

Exam question from Amazon's ANS-C00
Question #: 150
Topic #: 1
[All ANS-C00 Questions]

Your company has just completed a transition to IPv6 and has deployed a website on a server. You were able to download software on the instance without an issue. This website is deployed using IPv6, but the public is not able to access it. What should you do to fix this problem?

  • A. Add an internet gateway for the instance.
  • B. Add an egress-only internet gateway.
  • C. Add an inbound rule to your security group that allows inbound traffic on port 80 for ::/0.
  • D. Add an inbound rule to your security group that allows inbound traffic on port 80 for 0.0.0.0/0.
Show Suggested Answer Hide Answer
Suggested Answer: C 🗳️
Your instance can reach the internet if it was able to download sofftware, so an IGW is not needed. 0.0.0.0/0 is for IPv4.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
JamesTR
Highly Voted 3 years, 6 months ago
If they completed transition to IPv6 then they do not have IPV4 public IP address assigned to the web server. I understand that most of the "public” still use IPV4, but adding 0.0.0.0/0 alone to security group will not help. The question is not clear if they use Dual Stack or pure IPv6. I will go with answer C
upvoted 9 times
...
dev62
Most Recent 3 years, 6 months ago
I think Answer is D , as "the public is not able to access it". So allowing only ::/00 indound will allow only IPV6 address from Public to connect this server. As we have IPv4 used in large over Internet, D should be more specific.
upvoted 2 times
walkwolf3
3 years, 6 months ago
Answer D is to only allow IPv4 inbound to server. The question is asking for IPv6, and we don't care IPv4 at all. So the answer is C.
upvoted 2 times
...
...
Untoxico
3 years, 7 months ago
ANS B IPv6 addresses are globally unique, and are therefore public by default. If you want your instance to be able to access the internet, but you want to prevent resources on the internet from initiating communication with your instance, you can use an egress-only internet gateway https://docs.aws.amazon.com/vpc/latest/userguide/egress-only-internet-gateway.html
upvoted 2 times
eeghai7thioyaiR4
3 years, 7 months ago
You want external people to reach your web server on the instance Ans: C
upvoted 3 times
...
...
Scunningham99
3 years, 7 months ago
c C C C
upvoted 3 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago