PAS-C01 Migration Practice Question
A company is migrating an SAP system from on-premises to AWS. The current system uses a dual-stack (IPv4 and IPv6) network. The company wants to ensure that the SAP system on AWS supports both IP versions. Which THREE actions should the company take? (Choose 3.)
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Update security group rules to allow both IPv4 and IPv6 traffic
To support dual-stack (IPv4 and IPv6) on AWS, the VPC must be configured for dual-stack, EC2 instances must have both IPv4 and IPv6 addresses assigned, and security group rules must allow both IPv4 and IPv6 traffic. Option A (Update security group rules to allow both IPv4 and IPv6 traffic) is correct. Option B (Assign both IPv4 and IPv6 addresses to the EC2 instances) is correct. Option D (Configure the VPC to support dual-stack mode) is correct. Option C (Create an Egress-Only Internet Gateway) is not required for dual-stack support; it's used for outbound-only IPv6 traffic. Option E (Set up a NAT Gateway for IPv6 traffic) is incorrect because NAT Gateways are for IPv4, not IPv6.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Update security group rules to allow both IPv4 and IPv6 traffic
Why this is correct
Correct: Security group rules must allow both IPv4 and IPv6 traffic for dual-stack support.
- ✓
Assign both IPv4 and IPv6 addresses to the EC2 instances
Why this is correct
Correct: EC2 instances must have both IPv4 and IPv6 addresses assigned.
- ✗
Create an Egress-Only Internet Gateway
Why it's wrong here
Incorrect: An Egress-Only Internet Gateway is used for outbound-only IPv6 traffic, not a general requirement for dual-stack.
- ✓
Configure the VPC to support dual-stack mode
Why this is correct
Correct: The VPC must be configured for dual-stack (both IPv4 and IPv6 CIDR blocks).
- ✗
Set up a NAT Gateway for IPv6 traffic
Why it's wrong here
Incorrect: NAT Gateways support IPv4 only; for IPv6, an Egress-Only Internet Gateway is used.
Visual reference
Go deeper
Related to this question
About these practice questions
Courseiva writes every PAS-C01 question from scratch — 1,616 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This PAS-C01 practice question is part of Courseiva's free Amazon Web Services certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the PAS-C01 exam.