A VPC has an IPv6 CIDR block and needs outbound internet connectivity. The admin has added the necessary components, but instances still cannot reach internet hostnames. Which additional route entry must be added to the VPC route tables to enable IPv6 internet access?
Choose an answer
Tap an option to check your answer.
Correct answer: Add a ::/0 route that points to an egress-only internet gateway..
Why this is the answer
For IPv6 outbound internet connectivity from a private subnet, an egress-only internet gateway (EIGW) is required. The route table entry must specify ::/0 as the destination, which represents all IPv6 addresses, and point to the EIGW. This allows instances in the private subnet to initiate outbound IPv6 connections to the internet but prevents unsolicited inbound connections. A ::/0 route to a NAT gateway is incorrect because NAT gateways are used for IPv4 internet access from private subnets. A ::/0 route to an internet gateway is incorrect because an internet gateway provides both inbound and outbound internet access for public subnets, not private subnets requiring only outbound access for IPv6. A 0.0.0.0/0 route to an egress-only internet gateway is incorrect because 0.0.0.0/0 is for IPv4 traffic, not IPv6.
Pass your exam — without the endless answer hunt
Get every verified question and explanation for this exam in one place, and save hours of prep. 1,000+ certifications · 20+ languages · free to start.
Pass your exam faster → No card needed