AWS Certified Advanced Networking - Specialty ANS-C01Demo

By Amazon · Question Mode

QuestionQ138

Network Management and Operation

A company operates a global network and uses transit gateways to link AWS Regions. The company discovers that two Amazon EC2 instances in separate Regions cannot communicate. A network engineer must troubleshoot this connectivity problem.

What should the network engineer do to satisfy this requirement?

  • A Use AWS Network Manager Route Analyzer to analyze routes in the transit gateway route tables and in the VPC route tables. Use VPC flow logs to analyze the IP traffic that security group rules and network ACL rules accept or reject in the VPC.
  • B Use AWS Network Manager Route Analyzer to analyze routes in the transit gateway route tables. Verify that the VPC route tables are correct. Use AWS Firewall Manager to analyze the IP traffic that security group rules and network ACL rules accept or reject in the VPC.
  • C Use AWS Network Manager Route Analyzer to analyze routes in the transit gateway route tables. Verify that the VPC route tables are correct. Use VPC flow logs to analyze the IP traffic that security group rules and network ACL rules accept or reject in the VPC.
  • D Use VPC Reachability Analyzer to analyze routes in the transit gateway route tables. Verify that the VPC route tables are correct. Use VPC flow logs to analyze the IP traffic that security group rules and network ACL rules accept or reject in the VPC.
Explanation

AWS Network Manager Route Analyzer analyzes routing in transit gateway route tables only, so VPC route tables require separate verification. It does not evaluate security group or network ACL rules. VPC Flow Logs capture accepted and rejected IP traffic and can be used to diagnose traffic affected by security groups and network ACLs.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!