Amazon Exam ANS-C01 Topic 5 Question 11 Discussion

Actual exam question for Amazon's ANS-C01 exam

Question #: 11
Topic #: 5

A company has a global network and is using transit gateways to connect AWS Regions together. The company finds that two Amazon EC2 instances in different Regions are unable to communicate with each other. A network engineer needs to troubleshoot this connectivity issue.

What should the network engineer do to meet this requirement?

AUse AWS Network Manager Route Analyzer to analyze routes in the transit gateway route tables and in the VPC route tables. Use VPC flow logs to analyze the IP traffic that security group rules and network ACL rules accept or reject in the VPC.

BUse AWS Network Manager Route Analyzer to analyze routes in the transit gateway route tables. Verify that the VPC route tables are correct. Use AWS Firewall Manager to analyze the IP traffic that security group rules and network ACL rules accept or reject in the VPC.

CUse AWS Network Manager Route Analyzer to analyze routes in the transit gateway route tables. Verify that the VPC route tables are correct. Use VPC flow logs to analyze the IP traffic that security group rules and network ACL rules accept or reject in the VPC.

DUse VPC Reachability Analyzer to analyze routes in the transit gateway route tables. Verify that the VPC route tables are correct. Use VPC flow logs to analyze the IP traffic that security group rules and network ACL rules accept or reject in the VPC.

Show Suggested Answer

Suggested Answer: B, D

by Carin at Jul 25, 2023, 03:30 AM

Limited Time Offer

25%

Off

Get Premium ANS-C01 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Paulina

1 months ago

Hmm, Option D looks tempting, but why use VPC Reachability Analyzer when we have the tried and true VPC flow logs? Option C is the way to go, no doubt about it.

upvoted 0 times

Kaitlyn

2 days ago

But VPC flow logs are more reliable for analyzing IP traffic, so Option C seems like the safer choice.

upvoted 0 times

...

Leonora

3 days ago

I think Option D is better because VPC Reachability Analyzer can provide more detailed information.

upvoted 0 times

...

Lucina

1 months ago

Haha, I bet the network engineer is scratching their head right now, trying to figure out why these EC2 instances can't talk to each other. Gotta love those transit gateway problems!

upvoted 0 times

...

Matthew

1 months ago

I agree, Option C seems to be the most comprehensive solution. Checking the routing tables and using VPC flow logs to identify any security or network ACL rules that might be blocking the communication is crucial.

upvoted 0 times

...

Kenneth

2 months ago

I think option A is the best choice because it covers all the necessary steps to troubleshoot the connectivity issue between the EC2 instances in different Regions.

upvoted 0 times

...

Golda

2 months ago

I agree with Jacinta. It's important to also use VPC flow logs to analyze the IP traffic that security group rules and network ACL rules accept or reject in the VPC.

upvoted 0 times

...

Florinda

2 months ago

Option C is the correct answer. Analyzing the transit gateway route tables and VPC route tables, along with using VPC flow logs, is the best approach to troubleshoot the connectivity issue.

upvoted 0 times

Elenor

1 months ago

Great, so option C is the best approach to troubleshoot the connectivity issue.

upvoted 0 times

...

Adelle

1 months ago

Don't forget to use VPC flow logs to analyze the IP traffic that security group rules and network ACL rules accept or reject in the VPC.

upvoted 0 times

...

Desirae

1 months ago

Yes, that sounds like a good idea. We also need to verify that the VPC route tables are correct.

upvoted 0 times

...

Shaniqua

2 months ago

I think we should use AWS Network Manager Route Analyzer to analyze routes in the transit gateway route tables and VPC route tables.

upvoted 0 times

...

Jacinta

2 months ago

I think the network engineer should use AWS Network Manager Route Analyzer to analyze routes in the transit gateway route tables and in the VPC route tables.

upvoted 0 times

...

Mila

2 months ago

I think option A is the best choice. It covers all the necessary steps to troubleshoot the connectivity issue between the EC2 instances in different Regions.

upvoted 0 times

...

Carmelina

2 months ago

I agree with Carmen. It's important to also use VPC flow logs to analyze the IP traffic that security group rules and network ACL rules accept or reject in the VPC.

upvoted 0 times

...

Carmen

3 months ago

I think the network engineer should use AWS Network Manager Route Analyzer to analyze routes in the transit gateway route tables and in the VPC route tables.

upvoted 0 times

...