CLF-C02 · Question #182
CLF-C02 Question #182: Real Exam Question with Answer & Explanation
The correct answer is D: Internet gateway. An Internet Gateway (IGW) is the VPC component that enables bidirectional communication between resources in your VPC and the public internet, making it essential for inbound internet access. Without attaching an IGW to your VPC, no traffic from the internet can reach your resour
Question
Which component must be attached to a VPC to enable inbound internet access?
Options
- ANAT gateway
- BVPC endpoint
- CVPN connection
- DInternet gateway
Explanation
An Internet Gateway (IGW) is the VPC component that enables bidirectional communication between resources in your VPC and the public internet, making it essential for inbound internet access. Without attaching an IGW to your VPC, no traffic from the internet can reach your resources, regardless of other configurations like route tables or security groups.
A NAT Gateway (A) is the opposite use case - it allows outbound internet access for private subnet resources but deliberately blocks unsolicited inbound connections. A VPC Endpoint (B) enables private connectivity to AWS services (like S3 or DynamoDB) without traversing the internet at all. A VPN Connection (C) creates an encrypted tunnel between your VPC and an on-premises network, not the public internet.
Memory Tip: Think of the Internet Gateway as the literal "front door" of your VPC - just like a building needs a door to let visitors in, your VPC needs an IGW to let internet traffic in. The word "Internet" is right in the name, making this one of the more straightforward AWS networking concepts to remember on exam day.
Topics
Community Discussion
No community discussion yet for this question.