ANS-C01 Question #196: Real Exam Question with Answer & Explanation

Question

AnyCompany has acquired Example Corp. AnyCompany's infrastructure is all on premises, and Example Corp's infrastructure is completely in the AWS Cloud. The companies are using AWS Direct Connect with AWS Transit Gateway to establish connectivity between each other. Example Corp has deployed a new application across two Availability Zones in a VPC with no internet gateway. The CIDR range for the VPC is 10.0.0.0/16. Example Corp needs to access an application that is deployed on premises by AnyCompany. Because of compliance requirements, Example Corp must access the application through a limited contiguous block of approved IP addresses (10.1.0.0/24). A network engineer needs to implement a highly available solution to achieve this goal. The network engineer starts by updating the VPC to add a new CIDR range of 10.1.0.0/24. What should the network engineer do next to meet the requirements?

Options

• AIn each Availability Zone in the VPC, create a subnet that uses part of the allowed IP address
• BIn each Availability Zone in the VPC, create a subnet that uses part of the allowed IP address
• CIn the VPC, create a subnet that uses the allowed IP address range. Create a private NAT
• DIn the VPC, create a subnet that uses the allowed IP address range. Create a public NAT