Exam AWS Certified SysOps Administrator - Associate topic 1 question 153 discussion

Exam question from Amazon's AWS Certified SysOps Administrator - Associate

Question #: 153
Topic #: 1

[All AWS Certified SysOps Administrator - Associate Questions]

A SysOps administrator is attempting to download patches from the internet into an instance in a private subnet. An internet gateway exists for the VPC, and a NAT gateway has been deployed on the public subnet; however, the instance has no internet connectivity. The resources deployed into the private subnet must be inaccessible directly from the public internet.

Public Subnet (10.0.1.0/24) Route Table

Destination Target -
10.0.0.0/16 local
0.0.0.0/0 IGW

Private Subnet (10.0.2.0/24) Route Table

Destination Target -
10.0.0.0/16 local

What should be added to the private subnet’s route table in order to address this issue, given the information provided?

A. 0.0.0.0/0 IGW
B. 0.0.0.0/0 NAT
C. 10.0.1.0/24 IGW
D. 10.0.1.0/24 NAT

Show Suggested Answer

Suggested Answer: B 🗳️

by Liongeek at Nov. 16, 2022, 8:03 p.m.

Disclaimers:

- ExamTopics website is not related to, affiliated with, endorsed or authorized by Amazon.
- Trademarks, certification & product names are used for reference only and belong to Amazon.

Comments

Submit Cancel

tgv

6 months, 2 weeks ago

Selected Answer: B

The correct answer is 0.0.0.0/0 NAT.

upvoted 1 times

...

Christina666

1 year, 3 months ago

Selected Answer: B

To enable instances in a private subnet to connect to the internet, you can create a NAT gateway or launch a NAT instance in a public subnet. Then add a route for the private subnet's route table that routes IPv4 internet traffic (0.0.0.0/0) to the NAT device. https://docs.aws.amazon.com/vpc/latest/userguide/route-table-options.html#route-tables-nat

upvoted 4 times

...