A private municipal subnet's route table accidentally sends 0.0.0.0/0 to an internet gateway instead of a NAT gateway. What is the primary risk or failure mode?
Select an answer to reveal the explanation.
Short Explanation
Pointing private default traffic at an IGW is like mailing through the front door when you meant the back alley—traffic either won't work as planned or you risk exposure. Private subnets should default to NAT, not the internet gateway.
Full Explanation
Internet gateways provide ingress/egress for publicly addressed resources; private subnets typically use NAT for outbound-only internet access. A default route to an IGW from a private subnet is a misconfigured route that breaks intended isolation and connectivity patterns. It does not disable object versioning, break federation by itself, or remount volumes read-only.