Q413. A company is running a workload that consists of thousands of Amazon EC2 instances. The workload is running in a VPC that contains several public subnets and private subnets. The public subnets have a route fo 0 0.0 0/0 to an existing internet gateway. The private subnets have a route for 0.0.0.0/0 to an existing NAT gateway. A solutions architect needs to migrate the entire fleet of EC2 instances to use IPv6. The EC2 instances that are in private subnets must not be accessible from the public internet. What should the solutions architect do to meet these requirements?
A.Update the existing VPC and associate a custom IPv6 CIDR block with the VPC and all subnets Update all the VPC route tables and add a route Tor 70 to the internet gateway. B.Update the existing VPC and associate an Amazon-provided IPv6 CIDR block with the VPC and all subnetsUpdate the VPC route tables for all private subnets and add a route for :/0 to the NAT gateway C.Update the existing VPC and associate an Amazon-provided IPv6 CIDR block with the VPC and all subnetsCreate an egress-only internet gatewayUpdate the VPC route tables for all private subnets and add a route for正确答案C
:/0 to the egress-only internet gateway. D.Update the existing VPC and associate a custom IPv6 CIDR block with the VPC and all subnets Create a new NAT gateway and enable IPv6 supportUpdate the VPC route tables for all private subnets and add a route for: 70 to the IPv6-enabled NAT gateway