Which statement best describes the role of an Internet Gateway in a VPC?

• A. Manage DNS within the VPC
• B. Provide a path to the Internet for instances in the VPC
• C. Enforce firewall policies at the edge
• D. Act as a VPN concentrator

Answer: (B)

An Internet Gateway serves as the doorway between a VPC and the public Internet. It attaches to the VPC and is the target for route table entries that send traffic destined for the Internet (0.0.0.0/0) out to the gateway, allowing instances with public IPs to reach external hosts and for external traffic to reach those instances as appropriate. It does not provide DNS services within the VPC, nor does it enforce firewall policies (that’s handled by security groups and network ACLs), and it isn’t a VPN concentrator (that role is for terminating VPN connections). So, its primary function is to provide a path to the Internet for instances in the VPC.