AWS Certified SysOps Administrator - Associate SOA-C02 — Question 153

A SysOps administrator is attempting to download patches from the internet into an instance in a private subnet. An internet gateway exists for the VPC, and a NAT gateway has been deployed on the public subnet; however, the instance has no internet connectivity. The resources deployed into the private subnet must be inaccessible directly from the public internet. Public Subnet (10.0.1.0/24) Route Table Destination Target - 10.0.0.0/16 local 0.0.0.0/0 IGW Private Subnet (10.0.2.0/24) Route Table Destination Target - 10.0.0.0/16 local What should be added to the private subnet’s route table in order to address this issue, given the information provided?