You want to route traffic destined for a specific on-premises network (192.168.100.0/24) through a VPN connection (vgw-789xyz). How should you configure the route table?
hard📝 Application Q9 of 15
AWS - VPC Fundamentals
You want to route traffic destined for a specific on-premises network (192.168.100.0/24) through a VPN connection (vgw-789xyz). How should you configure the route table?
AAdd a route with DestinationCidrBlock 192.168.100.0/24 and Target NAT Gateway nat-789xyz
BAdd a route with DestinationCidrBlock 192.168.100.0/24 and Target Virtual Private Gateway vgw-789xyz
CAdd a route with DestinationCidrBlock 0.0.0.0/0 and Target Virtual Private Gateway vgw-789xyz
DAdd a route with DestinationCidrBlock 192.168.100.0/24 and Target Internet Gateway igw-789xyz
Step-by-Step Solution
Solution:
Step 1: Identify correct target for on-premises network
Traffic to on-premises network must go through Virtual Private Gateway (VPN).
Step 2: Verify destination CIDR and target
Destination is 192.168.100.0/24, target is vgw-789xyz.
Final Answer:
Add a route with DestinationCidrBlock 192.168.100.0/24 and Target Virtual Private Gateway vgw-789xyz -> Option B
Quick Check:
VPN routes use Virtual Private Gateway targets [OK]
Quick Trick:Use Virtual Private Gateway for on-premises VPN routes [OK]
Common Mistakes:
MISTAKES
Using Internet Gateway for VPN routes
Setting default route for VPN
Using NAT Gateway for on-premises traffic
Master "VPC Fundamentals" in AWS
9 interactive learning modes - each teaches the same concept differently