ANS-C01 · Question #245
A company's network engineer must implement a cloud-based networking environment for a network operations team to centrally manage. Other Teams will use the environment. Each team must be able to…
The correct answer is B. Create a new VPC. Associate an IPv4 CIDR block of 10.0.0.0/16 and use an Amazon-provided C. Enable sharing of resources within the organization by using AWS Resource Access Manager E. Create an internet gateway and an egress-only internal gateway. Deploy NAT gateways to the. Explanation Why B, C, and E are correct: B is correct because AWS provides Amazon-provided IPv6 CIDR blocks (automatically assigned /56 blocks) for dual-stack VPCs, which is the standard approach for enabling IPv6 in a VPC alongside an IPv4 CIDR - you don't manually specify the…
Question
A company's network engineer must implement a cloud-based networking environment for a network operations team to centrally manage. Other Teams will use the environment. Each team must be able to deploy infrastructure to the environment and must be able to manage its own resources. The environment must feature IPv4 and IPv6 support and must provide internet connectivity in a dual-stack configuration. The company has an organization in AWS Organizations that contains a workload account for the teams. The network engineer creates a new networking account in the organization. Which combination of steps should the network engineer take next to meet the requirements? (Choose three.)
Options
- ACreate a new VPC. Associate an IPv4 CIDR block of 10.0.0.0/16 and specify an IPv6 block of
- BCreate a new VPC. Associate an IPv4 CIDR block of 10.0.0.0/16 and use an Amazon-provided
- CEnable sharing of resources within the organization by using AWS Resource Access Manager
- DEnable sharing of resources within the organization by using AWS Resource Access Manager
- ECreate an internet gateway and an egress-only internal gateway. Deploy NAT gateways to the
- FCreate an internet gateway. Deploy NAT instances to public subnets. Update the route tables.
How the community answered
(37 responses)- A5% (2)
- B73% (27)
- D16% (6)
- F5% (2)
Explanation
Explanation
Why B, C, and E are correct:
B is correct because AWS provides Amazon-provided IPv6 CIDR blocks (automatically assigned /56 blocks) for dual-stack VPCs, which is the standard approach for enabling IPv6 in a VPC alongside an IPv4 CIDR - you don't manually specify the IPv6 range as AWS manages this allocation. C is correct because AWS Resource Access Manager (RAM) is the proper service to share VPC subnets across accounts within an AWS Organization, allowing the network team to centrally manage networking while other teams deploy their own resources into shared subnets. E is correct because a dual-stack internet configuration requires both an Internet Gateway (for IPv4/IPv6 inbound/outbound) and an Egress-Only Internet Gateway (for outbound-only IPv6 traffic), with NAT Gateways handling outbound IPv4 for private subnets.
Why the distractors are wrong:
- A is wrong because you cannot manually specify an IPv6 CIDR block for a standard VPC - AWS assigns the IPv6 block automatically.
- D is a duplicate/variation of C but likely references sharing at the wrong scope or using the wrong configuration.
- F is wrong because NAT instances are a legacy, manually managed solution; NAT Gateways (option E) are the modern, managed AWS-recommended approach.
Memory Tip: Think "RAM shares, Gateways route, AWS assigns IPv6" - RAM shares subnets across accounts, you need both IGW + Egress-Only IGW for dual-stack, and AWS always assigns IPv6 blocks automatically.
Topics
Community Discussion
No community discussion yet for this question.