Which of the below mentioned options is not a valid entry for the main route table in this scenario?

A user has created a VPC with CIDR 20.0.0.0/16 using the wizard. The user has created a public subnet CIDR
(20.0.0.0/24. and VPN only subnets CIDR (20.0.1.0/24. along with the VPN gateway (vgw-12345. to connect to
the user’s data centre. The user’s data centre has CIDR 172.28.0.0/12. The user has also setup a NAT instance
(i-123456. to allow traffic to the internet from the VPN subnet. Which of the below mentioned options is not a
valid entry for the main route table in this scenario?

A user has created a VPC with CIDR 20.0.0.0/16 using the wizard. The user has created a public subnet CIDR
(20.0.0.0/24. and VPN only subnets CIDR (20.0.1.0/24. along with the VPN gateway (vgw-12345. to connect to
the user’s data centre. The user’s data centre has CIDR 172.28.0.0/12. The user has also setup a NAT instance
(i-123456. to allow traffic to the internet from the VPN subnet. Which of the below mentioned options is not a
valid entry for the main route table in this scenario?

A.
Destination: 20.0.1.0/24 and Target: i-12345

B.
Destination: 0.0.0.0/0 and Target: i-12345

C.
Destination: 172.28.0.0/12 and Target: vgw-12345

D.
Destination: 20.0.0.0/16 and Target: local

Explanation:
The user can create subnets as per the requirement within a VPC. If the user wants to connect VPC from his
own data centre, he can setup a public and VPN only subnet which uses hardware VPN access to connect with
his data centre. When the user has configured this setup with Wizard, it will create a virtual private gateway to
route all traffic of the VPN subnet. If the user has setup a NAT instance to route all the internet requests then
all requests to the internet should be routed to it. All requests to the organization’s DC will be routed to the
VPN gateway.
Here are the valid entries for the main route table in this scenario:
Destination: 0.0.0.0/0 & Target: i-12345 (To route all internet traffic to the NAT Instance.
Destination: 172.28.0.0/12 & Target: vgw-12345 (To route all the organization’s data centre traffic to the VPN
gateway.
Destination: 20.0.0.0/16 & Target: local (To allow local routing in VPC.



Leave a Reply 0

Your email address will not be published. Required fields are marked *


svenkings

svenkings

correct answer is D

svenkings

svenkings

correct answer is A

Gig

Gig

A
cannot create a more specific route for 20.0.1.0/24 than local route 20.0.0.0/16 in route table