Courseiva
Network Management and OperationsmediumMultiple ChoiceObjective-mapped

ANS-C01 Network Management and Operations Practice Question

A network engineer notices that traffic from an EC2 instance in a public subnet to the internet is not working. The instance has a public IP assigned and is in a public subnet with a route to an internet gateway. The security group allows outbound traffic. What should the engineer check next?

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

Verify that the route table for the subnet has a 0.0.0.0/0 route pointing to the internet gateway.

Even if the instance has a public IP, if the subnet's route table does not have a default route (0.0.0.0/0) pointing to the internet gateway, traffic to the internet will fail. This is a common misconfiguration.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

  • Ensure the network ACL allows outbound traffic.

    Why it's wrong here

    Network ACLs are stateless and default allow outbound; but the route is more likely the issue.

  • Verify that the route table for the subnet has a 0.0.0.0/0 route pointing to the internet gateway.

    Why this is correct

    Without this route, traffic cannot reach the internet.

  • Confirm that the internet gateway is attached to the VPC.

    Why it's wrong here

    This is necessary but the route is the more likely missing piece.

  • Check if the instance has a public IP assigned.

    Why it's wrong here

    It is stated that the instance has a public IP.

Visual reference

192.168.1.0 /24 256 addresses (254 usable) 192.168.1.0 /25 Subnet A 128 addr (126 usable) 192.168.1.128 /25 Subnet B 128 addr (126 usable) Borrowing 1 bit from host portion creates 2 subnets (/25)

About these practice questions

This ANS-C01 question is part of Courseiva's 1,621-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

JA

Written by Johnson Ajibi, MSc IT Security

Senior Network & Security Engineer · founder of Courseiva

This ANS-C01 practice question is part of Courseiva's free Amazon Web Services certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the ANS-C01 exam.