Exam AWS Certified Solutions Architect - Associate SAA-C02 All Questions

View all questions & answers for the AWS Certified Solutions Architect - Associate SAA-C02 exam

Exam AWS Certified Solutions Architect - Associate SAA-C02 topic 1 question 368 discussion

Exam question from Amazon's AWS Certified Solutions Architect - Associate SAA-C02

Question #: 368
Topic #: 1

[All AWS Certified Solutions Architect - Associate SAA-C02 Questions]

A company has applications hosted on Amazon EC2 instances with IPv6 addresses. The applications must initiate communications with other external applications using the internet. However, the company's security policy states that any external service cannot initiate a connection to the EC2 instances. What should a solutions architect recommend to resolve this issue?

A. Create a NAT gateway and make it the destination of the subnet's route table.
B. Create an internet gateway and make it the destination of the subnet's route table.
C. Create a virtual private gateway and make it the destination of the subnet's route table.
D. Create an egress-only internet gateway and make it the destination of the subnet's route table.

Show Suggested Answer

Suggested Answer: D 🗳️

by dmscountera at March 11, 2021, 5:54 p.m.

Disclaimers:

- ExamTopics website is not related to, affiliated with, endorsed or authorized by Amazon.
- Trademarks, certification & product names are used for reference only and belong to Amazon.

Comments

Submit Cancel

Alileva

Highly Voted 3 years, 7 months ago

D An egress-only internet gateway is for use with IPv6 traffic only. To enable outbound-only internet communication over IPv4, use a NAT gateway instead. https://docs.aws.amazon.com/vpc/latest/userguide/egress-only-internet-gateway.html

upvoted 34 times

shantest1

3 years, 7 months ago

IPv6 is the deal breaker here, so answer is D.

upvoted 4 times

...

noahsark

3 years, 7 months ago

agree with D. adding below note from AWS for easy reference: An egress-only internet gateway is stateful

upvoted 5 times

waterforce

3 years, 7 months ago

I was thinking about NAT gateway and missed the information of ipv6. Thanks bro.

upvoted 1 times

...

93madox

Highly Voted 3 years, 8 months ago

IPv6 not supported in NAT Gateway, https://docs.aws.amazon.com/vpc/latest/userguide/vpc-nat-gateway.html Ans. D

upvoted 12 times

Jobair

2 years, 7 months ago

Check the link again NAT gateways are supported for IPv4 or IPv6 traffic. For IPv6 traffic, NAT gateway performs NAT64. By using this in conjunction with DNS64

upvoted 1 times

...

bora4motion

Most Recent 2 years, 10 months ago

Selected Answer: D

d-that's the whole purpose of an egress-only igw

upvoted 1 times

...

EmeraldTech

3 years, 5 months ago

Answer is D. IPv6 addresses are globally unique, and are therefore public by default. If you want your instance to be able to access the internet, but you want to prevent resources on the internet from initiating communication with your instance, you can use an egress-only internet gateway. https://docs.aws.amazon.com/vpc/latest/userguide/egress-only-internet-gateway.html

upvoted 3 times

...

Sharan_25_v

3 years, 5 months ago

Selected Answer: D

IPV6 equals D

upvoted 1 times

...

karthisena

3 years, 7 months ago

Egress Only Internet Gateway • Egress only Internet Gateway is for IPv6 only • Similar function as a NAT, but a NAT is for IPv4 • Good to know: IPv6 are all public addresses • Therefore all our instances with IPv6 are publicly accessibly • Egress Only Internet Gateway gives our IPv6 instances access to the internet, but they won’t be directly reachable by the internet • After creating an Egress Only Internet Gateway, edit the route tables

upvoted 4 times

...

syu31svc

3 years, 7 months ago

https://docs.aws.amazon.com/vpc/latest/userguide/egress-only-internet-gateway.html: "An egress-only internet gateway is a horizontally scaled, redundant, and highly available VPC component that allows outbound communication over IPv6 from instances in your VPC to the internet, and prevents the internet from initiating an IPv6 connection with your instances." Answer is D

upvoted 8 times

...

waqas

3 years, 8 months ago

DDDDDD

upvoted 5 times

...

dmscountera

3 years, 8 months ago

D. Create an egress-only internet gateway and make it the destination of the subnetג€™s route table.

upvoted 5 times

...