nerdexam
Amazon

SOA-C02 · Question #215

While setting up an AWS managed VPN connection, a SysOps administrator creates a customer gateway resource in AWS. The customer gateway device resides in a data center with a NAT gateway in front of…

The correct answer is D. The public IP address of the NAT device in front of the customer gateway device. If your customer gateway device is behind a network address translation (NAT) device, use the IP address of your NAT device. https://docs.aws.amazon.com/vpn/latest/s2svpn/cgw-options.html

Submitted by lucia.co· Mar 30, 2026Networking and Content Delivery

Question

While setting up an AWS managed VPN connection, a SysOps administrator creates a customer gateway resource in AWS. The customer gateway device resides in a data center with a NAT gateway in front of it. What address should be used to create the customer gateway resource?

Options

  • AThe private IP address of the customer gateway device
  • BThe MAC address of the NAT device in front of the customer gateway device
  • CThe public IP address of the customer gateway device
  • DThe public IP address of the NAT device in front of the customer gateway device

How the community answered

(56 responses)
  • A
    7% (4)
  • B
    2% (1)
  • C
    13% (7)
  • D
    79% (44)

Explanation

If your customer gateway device is behind a network address translation (NAT) device, use the IP address of your NAT device. https://docs.aws.amazon.com/vpn/latest/s2svpn/cgw-options.html

Topics

#VPN customer gateway#NAT traversal#managed VPN#IP addressing

Community Discussion

No community discussion yet for this question.

Full SOA-C02 Practice