ANS-C01 · Question #267
ANS-C01 Question #267: Real Exam Question with Answer & Explanation
The correct answer is A: Add the elastic network interfaces of the two new EC2 instances as members of the multicast. Add ENIs to the multicast group: To receive multicast traffic, the ENIs of the receiver EC2 instances must be explicitly added as members of the multicast group using the multicast group IP address (239.10.10.10). Create associations to the EC2 instance IDs: Multicast domains in
Question
A finance company runs multiple applications on Amazon EC2 instances in two VPCs that are within a single AWS Region. The company uses one VPC for stock trading applications. The company uses the second VPC for financial applications. Both VPCs are connected to a transit gateway that is configured as a multicast router. In the stock trading VPC, an EC2 instance that has an IP address of 10.128.10.2 sends trading data over a multicast network to the 239.10.10.10 IP address on UDP Port 5102. The company recently launched two new EC2 instances in the financial application VPC. The new EC2 instances need to receive the multicast stock trading data from the EC2 instance that is in the stock trading VPC. Which combination of steps should the company take to meet this requirement? (Choose three.)
Options
- AAdd the elastic network interfaces of the two new EC2 instances as members of the multicast
- BAdd an inbound rule to the security groups that are attached to the multicast receiver instances.
- CCreate associations to two EC2 instance IDs on the financial application VPC transit gateway
- DCreate an association to EC2 instance subnets on the financial application VPC transit gateway
- EAdd an inbound rule to the security groups that are attached to the multicast receiver instances.
- FAdd an inbound rule to the security groups that are attached to the multicast receiver instances.
Explanation
Add ENIs to the multicast group: To receive multicast traffic, the ENIs of the receiver EC2 instances must be explicitly added as members of the multicast group using the multicast group IP address (239.10.10.10). Create associations to the EC2 instance IDs: Multicast domains in a transit gateway allow multicast traffic to flow between VPCs. To enable specific instances to receive the multicast traffic, the instance IDs in the financial application VPC must be associated with the transit gateway multicast domain. Add a security group rule for UDP traffic: The receiver instances need a security group rule to allow inbound UDP traffic on port 5102 from the sender EC2 instance (source IP: 10.128.10.2). This ensures that multicast traffic is allowed to reach the receiving instances.
Community Discussion
No community discussion yet for this question.