Exam AWS Certified SysOps Administrator - Associate topic 1 question 169 discussion

Vote for D IPV4 = NAT Instance/Gateway | 0.0.0.0 IPV6 = Egress-Only Internet Gateway | ::/0

Ans: D Ref: https://docs.aws.amazon.com/vpc/latest/userguide/egress-only-internet-gateway.html

B. Route ::/0 traffic to an internet gateway To enable IPv6 traffic from an Amazon VPC to the internet, you need to add a default route (::/0) pointing to an internet gateway in the VPC's route table. This allows outbound traffic to reach the internet. This route configuration allows all IPv6 traffic (::/0) to be directed to the internet gateway, enabling communication with the internet. # Option A is incorrect because using a NAT gateway is typically for IPv4 traffic and is not applicable for IPv6. # Options C and D are not relevant for enabling outbound internet access in an IPv6-enabled VPC. Egress-only internet gateways are used for allowing outbound traffic initiated by resources in the VPC to reach the internet, but they are not used for incoming traffic from the internet.

IPv6 addresses are globally unique, and are therefore public by default. If you want your instance to be able to access the internet, but you want to prevent resources on the internet from initiating communication with your instance, you can use an egress-only internet gateway. To do this, create an egress-only internet gateway in your VPC, and then add a route to your route table that points all IPv6 traffic (::/0) or a specific range of IPv6 address to the egress-only internet gateway. IPv6 traffic in the subnet that's associated with the route table is routed to the egress-only internet gateway.

It cannot be B, since access from the internet must be prohibited

Ddddddddddd

Dddddddd

ddddddd

B. Route ::/0 traffic to an internet gateway NOT D because egress-only-internet-gateway is for accessing internet from private subnet