A user has created a VPC with CIDR 20.0.0.0/16 using the wizard. The user has created a public subnet CIDR (20.0.0.0/24) and VPN only subnets CIDR (20.0.1.0/24) along with the VPN gateway (vgw-12345) to connect to the user's data center. The user's data center has CIDR 172.28.0.0/12. The user has also setup a NAT instance (i-123456) to allow traffic to the internet from the VPN subnet. Which of the below mentioned options is not a valid entry for the main route table in this scenario?
A) Destination: 20.0.1.0/24 and Target: i-12345
B) Destination: 0.0.0.0/0 and Target: i-12345
C) Destination: 172.28.0.0/12 and Target: vgw-12345
D) Destination: 20.0.0.0/16 and Target: local

Question

Quizplus · Accepted Answer

The main route table should not have a route to the VPN subnet (20.0.1.0/24) with a target of the NAT instance (i-12345). The NAT instance is used to allow traffic from the VPN subnet to the internet, but it should not be used as the target for traffic from the main VPC subnet (20.0.0.0/24).

A User Has Created a VPC with CIDR 20