ANS-C01 Network Design Practice Question

A company has a VPC with both IPv4 and IPv6 CIDR blocks. The application team wants to allow internet traffic to an IPv6-enabled web server. Which resource must be configured?

⚠ Common exam trap

Watch out — candidates often confuse the Egress-Only Internet Gateway with a full-duplex gateway, forgetting that it only supports outbound IPv6 traffic and cannot accept inbound connections from the internet.

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

✓

Internet Gateway

An Internet Gateway (IGW) is required to allow inbound and outbound IPv6 traffic between a VPC and the internet. Unlike IPv4, IPv6 addresses in AWS are globally unique by default, so no NAT is needed; the IGW directly routes traffic for both IPv4 and IPv6 when attached to the VPC and associated with the route table.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

✗
NAT64
Why it's wrong here
For IPv6 to IPv4 translation.
✗
Egress-Only Internet Gateway
Why it's wrong here
Outbound only.
✗
NAT Gateway
Why it's wrong here
IPv4 only.
✓
Internet Gateway
Why this is correct
Supports IPv6 inbound.

Visual reference

Go deeper

ANS-C01 Network Design Practice Question

Why each option matters

Option-by-option breakdown

Related to this question