A user has created a VPC with CIDR 20.0.0.0/16 using the wizard. The user has created a public
subnet CIDR (20.0.0.0/24. and VPN only subnets CIDR (20.0.1.0/24. along with the VPN gateway
(vgw-12345. to connect to the user’s data centre. The user’s data centre has CIDR 172.28.0.0/12.
The user has also setup a NAT instance (i-123456. to allow traffic to the internet from the VPN
subnet. Which of the below mentioned options is not a valid entry for the main route table in this
scenario?

A.
Destination: 20.0.1.0/24 and Target: i-12345

B.
Destination: 0.0.0.0/0 and Target: i-12345

C.
Destination: 172.28.0.0/12 and Target: vgw-12345

D.
Destination: 20.0.0.0/16 and Target: local

Explanation:
The user can create subnets as per the requirement within a VPC. If the user wants to connect
VPC from his own data centre, he can setup a public and VPN only subnet which uses hardware
VPN access to connect with his data centre. When the user has configured this setup with Wizard,
it will create a virtual private gateway to route all traffic of the VPN subnet. If the user has setup a
NAT instance to route all the internet requests then all requests to the internet should be routed to
it. All requests to the organization’s DC will be routed to the VPN gateway.
Here are the valid entries for the main route table in this scenario:
Destination: 0.0.0.0/0 & Target: i-12345 (To route all internet traffic to the NAT Instance.
Destination: 172.28.0.0/12 & Target: vgw-12345 (To route all the organization’s data centre traffic
to the VPN gateway.
Destination: 20.0.0.0/16 & Target: local (To allow local routing in VPC.