πŸ”₯ 40% Off Crucial Exams Memberships β€” This Week Only

3 days, 8 hours remaining!

AWS Certified CloudOps Engineer Associate SOA-C03 Practice Question

An operations engineer created an IPv6-only private subnet in an Amazon VPC. EC2 instances in the subnet must download operating-system updates from public IPv6 repositories on the internet, but company policy forbids the instances from accepting unsolicited inbound connections. Which action satisfies these requirements with the least operational overhead?

  • Create an egress-only internet gateway for the VPC and add a ::/0 route to it in the subnet's route table.

  • Create an interface VPC endpoint for each public repository and update the subnet's route table.

  • Provision a NAT gateway in a public subnet and add a ::/0 route to the NAT gateway.

  • Attach an internet gateway to the VPC and rely on outbound-only rules in the subnet's security group.

AWS Certified CloudOps Engineer Associate SOA-C03
Networking and Content Delivery
Your Score:
Settings & Objectives
Random Mixed
Questions are selected randomly from all chosen topics, with a preference for those you haven’t seen before. You may see several questions from the same objective or domain in a row.
Rotate by Objective
Questions cycle through each objective or domain in turn, helping you avoid long streaks of questions from the same area. You may see some repeat questions, but the distribution will be more balanced across topics.

Check or uncheck an objective to set which questions you will receive.

Bash, the Crucial Exams Chat Bot
AI Bot