AWS Certified CloudOps Engineer Associate SOA-C03 Practice Question
A company's VPC has a dual-stack private subnet containing EC2 instances. These instances need to initiate outbound connections to the IPv6 internet to download software updates. However, they must not be directly reachable from the internet over IPv6. The subnet's route table already directs some traffic to an on-premises network. Which single route should an administrator add to the subnet's route table to meet these requirements?
Add route ::/0 that targets the VPC's internet gateway
Add route ::/0 that targets an egress-only internet gateway attached to the VPC
Add route 0.0.0.0/0 that targets the VPC's internet gateway
Add route 0.0.0.0/0 that targets an egress-only internet gateway
Instances in a private subnet need a path to the public IPv6 internet for tasks like downloading updates. An egress-only internet gateway provides outbound-only IPv6 connectivity and is stateful, allowing return traffic for initiated connections but blocking unsolicited inbound traffic. To enable this, a route for the IPv6 default prefix (::/0) must be added to the subnet's route table, with the egress-only internet gateway as its target. Pointing ::/0 at a regular internet gateway would allow inbound IPv6 traffic, violating the requirements. Routes for 0.0.0.0/0 only affect IPv4 traffic and would not solve the IPv6 connectivity issue.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
What is an egress-only internet gateway in AWS?
Open an interactive chat with Bash
Why use ::/0 for IPv6 routing instead of 0.0.0.0/0?
Open an interactive chat with Bash
How does an egress-only internet gateway differ from a regular internet gateway?
Open an interactive chat with Bash
AWS Certified CloudOps Engineer Associate SOA-C03
Networking and Content Delivery
Your Score:
Report Issue
Bash, the Crucial Exams Chat Bot
AI Bot
Loading...
Loading...
Loading...
Pass with Confidence.
IT & Cybersecurity Package
You have hit the limits of our free tier, become a Premium Member today for unlimited access.
Military, Healthcare worker, Gov. employee or Teacher? See if you qualify for a Community Discount.
Monthly
$19.99
$19.99/mo
Billed monthly, Cancel any time.
3 Month Pass
$44.99
$14.99/mo
One time purchase of $44.99, Does not auto-renew.
MOST POPULAR
Annual Pass
$119.99
$9.99/mo
One time purchase of $119.99, Does not auto-renew.
BEST DEAL
Lifetime Pass
$189.99
One time purchase, Good for life.
What You Get
All IT & Cybersecurity Package plans include the following perks and exams .