nerdexam
Amazon

ANS-C01 · Question #9

A banking company is successfully operating its public mobile banking stack on AWS. The mobile banking stack is deployed in a VPC that includes private subnets and public subnets. The company is…

The correct answer is C. Create an egress-only Internet gateway in the VPAdd a route to the existing subnet route tables. https://docs.aws.amazon.com/vpc/latest/userguide/egress-only-internet-gateway.html Egress only internet gateway avoid internet initiate the traffic.

Submitted by yasin.bd· Mar 6, 2026Design Complex Network Solutions

Question

A banking company is successfully operating its public mobile banking stack on AWS. The mobile banking stack is deployed in a VPC that includes private subnets and public subnets. The company is using IPv4 networking and has not deployed or supported IPv6 in the environment. The company has decided to adopt a third-party service provider's API and must integrate the API with the existing environment. The service provider's API requires the use of IPv6. A network engineer must turn on IPv6 connectivity for the existing workload that is deployed in a private subnet. The company does not want to permit IPv6 traffic from the public internet and mandates that the company's servers must initiate all IPv6 connectivity. The network engineer turns on IPv6 in the VPC and in the private subnets. Which solution will meet these requirements?

Options

  • ACreate an internet gateway and a NAT gateway in the VPC. Add a route to the existing subnet
  • BCreate an internet gateway and a NAT instance in the VPC. Add a route to the existing subnet
  • CCreate an egress-only Internet gateway in the VPAdd a route to the existing subnet route tables
  • DCreate an egress-only internet gateway in the VPC. Configure a security group that denies all

How the community answered

(51 responses)
  • A
    10% (5)
  • B
    18% (9)
  • C
    69% (35)
  • D
    4% (2)

Explanation

https://docs.aws.amazon.com/vpc/latest/userguide/egress-only-internet-gateway.html Egress only internet gateway avoid internet initiate the traffic.

Topics

#AWS IPv6#Egress-only Internet Gateway#VPC routing#Private subnet connectivity

Community Discussion

No community discussion yet for this question.

Full ANS-C01 Practice