Exam AWS-SysOps topic 1 question 172 discussion

Exam question from Amazon's AWS-SysOps

Question #: 172
Topic #: 1

A user has created a VPC with CIDR 20.0.0.0/16 using VPC Wizard. The user has created a public CIDR (20.0.0.0/24) and a VPN only subnet CIDR (20.0.1.0/24) along with the hardware VPN access to connect to the user's data center. Which of the below mentioned components is not present when the VPC is setup with the wizard?

A. Main route table attached with a VPN only subnet
B. A NAT instance configured to allow the VPN subnet instances to connect with the internet
C. Custom route table attached with a public subnet
D. An internet gateway for a public subnet

Show Suggested Answer

Suggested Answer: B 🗳️
The user can create subnets as per the requirement within a VPC. If the user wants to connect VPC from his own data center, he can setup a public and VPN only subnet which uses hardware VPN access to connect with his data center. When the user has configured this setup with Wizard, it will update the main route table used with the VPN-only subnet, create a custom route table and associate it with the public subnet. It also creates an internet gateway for the public subnet. The wizard does not create a NAT instance by default. The user can create it manually and attach it with a VPN only subnet.

by karmaah at Dec. 25, 2019, 2:53 a.m.

Disclaimers:

- ExamTopics website is not related to, affiliated with, endorsed or authorized by Amazon.
- Trademarks, certification & product names are used for reference only and belong to Amazon.

Comments

Submit Cancel

hoomaan

Highly Voted 6 months, 3 weeks ago

Can sb add explanation , in Q.166 we accepted that if we run VPC through Wizard, it will add NAT instance automatically, but here it chooses B option which says NAT Instance is NOT present when VPC is setup with Wizard!?!!??

upvoted 7 times

Golddust

6 months, 1 week ago

This scenario doesn't create Private subsets but VPN only subsets. As per the VPC wizard it does not need to connect to the internet since the purpose is for VPN only.

upvoted 1 times