ANS-C01 · Question #281
A company runs workloads in multiple VPCs. The company needs to securely access a workload in one of the VPCs, named VPC-A, from an on- premises data center. A network engineer sets up an AWS…
The correct answer is A. Configure route propagation for VPC-A to the VPN attachment route table. Dynamic Route Propagation: By enabling route propagation on the VPN attachment route table, any changes to the VPC CIDR (such as adding new CIDR ranges) are automatically propagated to the transit gateway route tables and the on-premises network. This ensures seamless…
Question
A company runs workloads in multiple VPCs. The company needs to securely access a workload in one of the VPCs, named VPC-A, from an on- premises data center. A network engineer sets up an AWS Site-to-Site VPN connection to a transit gateway. The network engineer configures dynamic routing for the connection, and communication works properly. Recently, the owner of VPC-A added another CIDR range to the VPC. The VPC-A owner created workloads that use the additional CIDR range. The company's on-premises network is unable to reach the new workloads. The network engineer needs to resolve the network connectivity issue and ensure that connectivity will not be affected if additional VPC CIDR ranges are added to the VPC in the future. Which solution will meet these requirements with the MOST operational efficiency?
Options
- AConfigure route propagation for VPC-A to the VPN attachment route table.
- BManually update the VPN attachment route table to include the new CIDR range.
- CConfigure an Amazon EventBridge rule to invoke an AWS Lambda function when the rule to
- DConfigure an Amazon CloudWatch alarm to invoke an AWS Lambda function when there is an
How the community answered
(42 responses)- A79% (33)
- B2% (1)
- C12% (5)
- D7% (3)
Explanation
Dynamic Route Propagation: By enabling route propagation on the VPN attachment route table, any changes to the VPC CIDR (such as adding new CIDR ranges) are automatically propagated to the transit gateway route tables and the on-premises network. This ensures seamless connectivity without requiring manual updates. Operational Efficiency: This approach eliminates the need for manual updates or additional automation, reducing operational overhead. Any new CIDR ranges added to VPC-A will automatically be advertised to the on-premises network through the VPN connection. Future-Proof Solution: Configuring route propagation ensures that future updates to VPC CIDR ranges are automatically handled, providing a robust and scalable solution.
Community Discussion
No community discussion yet for this question.