nerdexam
AmazonAmazon

ANS-C01 · Question #60

ANS-C01 Question #60: Real Exam Question with Answer & Explanation

The correct answer is C: Enable TCP keepalive on the client EC2 instances with a value of less than 300 seconds.. When a TCP connection is idle for a long time, it may be terminated by network devices, including the NAT gateway. By enabling TCP keepalive, the client EC2 instances can periodically send packets to the third-party database to indicate that the connection is still active, preven

Submitted by hans_de· Mar 6, 2026

Question

A company recently migrated its Amazon EC2 instances to VPC private subnets to satisfy a security compliance requirement. The EC2 instances now use a NAT gateway for internet access. After the migration, some long-running database queries from private EC2 instances to a publicly accessible third-party database no longer receive responses. The database query logs reveal that the queries successfully completed after 7 minutes but that the client EC2 instances never received the response. Which configuration change should a network engineer implement to resolve this issue?

Options

  • AConfigure the NAT gateway timeout to allow connections for up to 600 seconds.
  • BEnable enhanced networking on the client EC2 instances.
  • CEnable TCP keepalive on the client EC2 instances with a value of less than 300 seconds.
  • DClose idle TCP connections through the NAT gateway.

Explanation

When a TCP connection is idle for a long time, it may be terminated by network devices, including the NAT gateway. By enabling TCP keepalive, the client EC2 instances can periodically send packets to the third-party database to indicate that the connection is still active, preventing it from being terminated prematurely.

Topics

#NAT Gateway#TCP Keepalive#Network Troubleshooting#Idle Timeout

Community Discussion

No community discussion yet for this question.

Full ANS-C01 PracticeBrowse All ANS-C01 Questions