ANS-C01 Network Design Practice Question

A company is designing a VPC with IPv6. Which components are required to enable IPv6 communication between instances in the VPC and the internet? (Select TWO.)

⚠ Common exam trap

Candidates often confuse the egress-only internet gateway (for outbound-only IPv6) with the internet gateway (for bidirectional IPv6), or mistakenly think a NAT Gateway supports IPv6, when in fact NAT Gateways are IPv4-only and IPv6 requires an internet gateway for full internet access.

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

✓

A route in the subnet route table to ::/0 to the internet gateway

To enable IPv6 communication between instances in a VPC and the internet, you need an internet gateway (IGW) attached to the VPC, and a route in the subnet's route table that directs IPv6 traffic (destination ::/0) to that internet gateway. The IGW performs NAT for IPv6 (using eUI-64 addresses) and allows bidirectional traffic, so both components are required.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

✗
An egress-only internet gateway
Why it's wrong here
Egress-only internet gateway is for outbound-only IPv6 traffic; for inbound, you need an internet gateway.
✓
A route in the subnet route table to ::/0 to the internet gateway
Why this is correct
This route enables IPv6 traffic to and from the internet.
✗
A VPC peering connection to a VPC with internet access
Why it's wrong here
VPC peering does not provide internet gateway access.
✓
An internet gateway
Why this is correct
An internet gateway enables IPv6 traffic in both directions.
✗
A NAT Gateway
Why it's wrong here
NAT Gateway only supports IPv4.

Visual reference

Go deeper

ANS-C01 Network Design Practice Question

Why each option matters

Option-by-option breakdown

Related to this question