ANS-C01 · Question #37
A company has deployed a critical application on a fleet of Amazon EC2 instances behind an Application Load Balancer. The application must always be reachable on port 443 from the public internet…
The correct answer is D. Create a VPC Reachability Analyzer path on port 443. Specify the internet gateway of the VPC as. The question requires - "automate a way to verify the network connectivity between the public internet and the EC2 instances", not just on failed connections. By implementing automated reachability assessment using Reachability Analyzer, application issues due to connectivity…
Question
A company has deployed a critical application on a fleet of Amazon EC2 instances behind an Application Load Balancer. The application must always be reachable on port 443 from the public internet. The application recently had an outage that resulted from an incorrect change to the EC2 security group. A network engineer needs to automate a way to verify the network connectivity between the public internet and the EC2 instances whenever a change is made to the security group. The solution also must notify the network engineer when the change affects the connection. Which solution will meet these requirements?
Options
- AEnable VPC Flow Logs on the elastic network interface of each EC2 instance to capture REJECT
- BEnable VPC Flow Logs on the elastic network interface of each EC2 instance to capture all traffic
- CCreate a VPC Reachability Analyzer path on port 443. Specify the security group as the source.
- DCreate a VPC Reachability Analyzer path on port 443. Specify the internet gateway of the VPC as
How the community answered
(34 responses)- A21% (7)
- B6% (2)
- C9% (3)
- D65% (22)
Explanation
The question requires - "automate a way to verify the network connectivity between the public internet and the EC2 instances", not just on failed connections. By implementing automated reachability assessment using Reachability Analyzer, application issues due to connectivity problems are detected quickly. Below post demonstrates an automated method to verify network connectivity between VPC elements after an infrastructure change is made, and alert administrators in the event reachability has been affected. https://aws.amazon.com/blogs/networking-and-content-delivery/automating-connectivity- assessments-with-vpc-reachability-analyzer/ Application load Balancer is supported as intermediary path in the reachability analyzer.
Topics
Community Discussion
No community discussion yet for this question.