Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
AWS Certified Solutions Architect - Professional · AWS
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
I think you wrote it incorrectly, precisely in the part in which you say ' allows traffic from the public internet to exit the VPC'. Did you mean 'allows trafic from the VPC to the public internet', right?
C is correct
Associating an Amazon-provided IPv6 CIDR block with the VPC and all subnets ensures that the EC2 instances in the VPC can use IPv6 without requiring additional configuration. Creating an egress-only internet gateway allows traffic from the public internet to exit the VPC, but prevents incoming traffic (ingress) from reaching the VPC. This meets the requirement that EC2 instances in private subnets must not be accessible from the public internet. Updating the VPC route tables for all private subnets and adding a route for ::/0 to the egress-only internet gateway ensures that traffic destined for IPv6 addresses outside the VPC can exit through the egress-only internet gateway.