AWS Certified CloudOps Engineer Associate SOA-C03 Practice Question
An operations engineer launches an EC2 instance in a subnet that has an Elastic IP address associated with its network interface. The VPC already has an internet gateway attached, but the instance cannot reach the public internet. Security group rules allow outbound HTTPS traffic. Which change will enable the instance to establish outbound internet connectivity in the most cost-effective manner?
Deploy a NAT gateway in the subnet and point the default route to the NAT gateway.
Associate the internet gateway directly with the subnet instead of the VPC.
Create an egress-only internet gateway and add a default IPv4 route to it.
Add a 0.0.0.0/0 route in the subnet's route table that targets the internet gateway.
For a subnet to be public, its route table must contain a default route (0.0.0.0/0) that targets the VPC's internet gateway. Without that entry, traffic that is destined for the internet is dropped, even when an Elastic IP is attached and security groups allow the traffic. Adding the route costs nothing and immediately enables two-way IPv4 connectivity.
Associating an internet gateway to a subnet is not possible; an internet gateway attaches only to the VPC. Deploying a NAT gateway would restore outbound access, but it is unnecessary and would add hourly and data-processing charges. An egress-only internet gateway supports IPv6 traffic only, so it would not help the IPv4-based Elastic IP reach the internet.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
What is a route table in a VPC?
Open an interactive chat with Bash
What is an Elastic IP address, and how does it work?
Open an interactive chat with Bash
What is the role of an internet gateway in a VPC?
Open an interactive chat with Bash
AWS Certified CloudOps Engineer Associate SOA-C03
Networking and Content Delivery
Your Score:
Report Issue
Bash, the Crucial Exams Chat Bot
AI Bot
Loading...
Loading...
Loading...
Pass with Confidence.
IT & Cybersecurity Package
You have hit the limits of our free tier, become a Premium Member today for unlimited access.
Military, Healthcare worker, Gov. employee or Teacher? See if you qualify for a Community Discount.
Monthly
$19.99
$19.99/mo
Billed monthly, Cancel any time.
3 Month Pass
$44.99
$14.99/mo
One time purchase of $44.99, Does not auto-renew.
MOST POPULAR
Annual Pass
$119.99
$9.99/mo
One time purchase of $119.99, Does not auto-renew.
BEST DEAL
Lifetime Pass
$189.99
One time purchase, Good for life.
What You Get
All IT & Cybersecurity Package plans include the following perks and exams .