nerdexam
CompTIA

CV0-002 · Question #311

A cloud administrator has configured a connection between two virtual private cloud environments at a public cloud provider that are each in different accounts. The administrator has configured the ac

The correct answer is D. The routing tables have not been updated correctly.. The most likely reason for SSH connection failure between two VPCs with correct security policies is incorrectly configured routing tables.

Troubleshooting

Question

A cloud administrator has configured a connection between two virtual private cloud environments at a public cloud provider that are each in different accounts. The administrator has configured the accounts correctly so they can connect to each other's resources. Both cloud environments have policies that allow anyone from 0.0.0.0/0 on TCP port 22. The following table shows the network configuration information:

However, the administrator is unable to establish an SSH connection from a server in 10.250.40.100 to 10.250.48.214. Which of the following is the MOST likely issue?

Options

  • AThe network ACL is not configured to allow SSH access.
  • BThe IP configuration on one of the servers is incorrect.
  • CThe administrator does not have sufficient credentials.
  • DThe routing tables have not been updated correctly.

How the community answered

(35 responses)
  • A
    9% (3)
  • B
    29% (10)
  • C
    17% (6)
  • D
    46% (16)

Why each option

The most likely reason for SSH connection failure between two VPCs with correct security policies is incorrectly configured routing tables.

AThe network ACL is not configured to allow SSH access.

The question explicitly states that "Both cloud environments have policies that allow anyone from 0.0.0.0/0 on TCP port 22," which covers both security groups and network ACLs.

BThe IP configuration on one of the servers is incorrect.

The server IP configurations are provided and appear to be valid private IPs within their respective networks; there is no indication in the problem description that they are incorrect.

CThe administrator does not have sufficient credentials.

Insufficient administrator credentials would prevent configuration changes, but not directly block an established network path if the configurations were already correct. SSH connection issues relate to network reachability or host-level authentication, not cloud platform administrative access.

DThe routing tables have not been updated correctly.Correct

When connecting virtual private cloud environments, especially across different accounts, routing tables must be correctly configured in both VPCs to direct traffic between their respective CIDR blocks. Even if security groups and Network ACLs permit traffic, a lack of appropriate routes will prevent packets from reaching the destination.

Concept tested: Inter-VPC connectivity and routing

Source: https://docs.aws.amazon.com/vpc/latest/peering/working-with-vpc-peering.html

Topics

#VPC peering#Cloud networking#Routing tables#Troubleshooting connectivity

Community Discussion

No community discussion yet for this question.

Full CV0-002 Practice