Courseiva
Network ImplementationmediumMultiple ChoiceObjective-mapped

ANS-C01 Network Implementation Practice Question

A company has a VPC with an IPv6 CIDR and wants to provide internet access to instances in a private subnet using IPv6. Which AWS service should be used?

⚠ Common exam trap

A common mix-up: candidates confuse the Egress-Only Internet Gateway with a NAT Gateway, mistakenly thinking IPv6 requires address translation, or they select the Internet Gateway without realizing it would expose private instances to inbound IPv6 traffic.

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

Egress-Only Internet Gateway

An Egress-Only Internet Gateway (EIGW) is the correct AWS service for providing outbound-only IPv6 internet access to instances in a private subnet. Unlike IPv4, IPv6 addresses are globally unique and publicly routable by default, so a NAT-like translation is unnecessary; the EIGW allows outbound traffic while preventing unsolicited inbound connections, aligning with the private subnet's security posture.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

  • VPC Gateway Endpoint

    Why it's wrong here

    Gateway endpoints support S3 and DynamoDB only, not general internet access.

  • Internet Gateway

    Why it's wrong here

    Internet Gateway allows inbound traffic; not suitable for private subnets.

  • NAT Gateway

    Why it's wrong here

    NAT Gateway does not support IPv6.

  • Egress-Only Internet Gateway

    Why this is correct

    Egress-only internet gateway provides outbound-only IPv6 access.

Visual reference

Inside (Private) PC-A 10.0.0.1 PC-B 10.0.0.2 NAT Router Outside (Public) 203.0.113.1 Inside Global Server PAT: many private IPs share one public IP via unique port numbers

About these practice questions

This ANS-C01 question is part of Courseiva's 1,621-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

JA

Written by Johnson Ajibi, MSc IT Security

Senior Network & Security Engineer · founder of Courseiva

This ANS-C01 practice question is part of Courseiva's free Amazon Web Services certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the ANS-C01 exam.