ANS-C01 · Question #126
A company runs an application on Amazon EC2 instances. A network engineer implements a NAT gateway in the application's VPC to replace self-managed NAT instances. After the network engineer shifts tra
The correct answer is A. Check for increases in the IdleTimeoutCount Amazon CloudWatch metric for the NAT gateway.. Internet connection drops after 350 seconds Your instances can access the internet, but the connection drops after 350 seconds. If a connection that's using a NAT gateway is idle for 350 seconds or more, the connection times When a connection times out, a NAT gateway returns an R
Question
A company runs an application on Amazon EC2 instances. A network engineer implements a NAT gateway in the application's VPC to replace self-managed NAT instances. After the network engineer shifts traffic from the self-managed NAT instances to the NAT gateway, users begin to report issues. During troubleshooting, the network engineer discovers that the connection to the application is closing after approximately 6 minutes of inactivity. What should the network engineer do to resolve this issue?
Options
- ACheck for increases in the IdleTimeoutCount Amazon CloudWatch metric for the NAT gateway.
- BCheck for increases in the ErrorPortAllocation Amazon CloudWatch metric for the NAT gateway.
- CCheck for increases in the PacketsDropCount Amazon CloudWatch metric for the NAT gateway.
- DCheck for decreases in the ActiveConnectionCount Amazon CloudWatch metric for the NAT
How the community answered
(50 responses)- A62% (31)
- B10% (5)
- C22% (11)
- D6% (3)
Explanation
Internet connection drops after 350 seconds Your instances can access the internet, but the connection drops after 350 seconds. If a connection that's using a NAT gateway is idle for 350 seconds or more, the connection times When a connection times out, a NAT gateway returns an RST packet to any resources behind the NAT gateway that attempt to continue the connection (it does not send a FIN packet). To prevent the connection from being dropped, you can initiate more traffic over the connection. Alternatively, you can enable TCP keepalive on the instance with a value less than 350 seconds.
Topics
Community Discussion
No community discussion yet for this question.