QuestionQ49

Network Design

A company’s application team cannot launch new resources in its VPC. A network engineer determines that the VPC has exhausted its usable IP addresses. The VPC CIDR block is 172.16.0.0/16.

Which additional CIDR block can the network engineer associate with the VPC?

  • A 172.17.0.0/29
  • B 10.0.0.0/16
  • C 172.17.0.0/16
  • D 192.168.0.0/16
Explanation

For a VPC with an existing CIDR in the 172.16.0.0/12 private range, AWS permits an additional CIDR from that same range, provided its prefix length is from /16 through /28 and it is not otherwise restricted. 172.17.0.0/16 meets these requirements. AWS restricts associating CIDRs from the other RFC 1918 ranges (10.0.0.0/8 and 192.168.0.0/16) in this case.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!