ANS-C01 Question 115
Single answerYour company has deployed a multi-tier application in AWS spanning multiple VPCs connected via AWS Transit Gateway. Users are reporting intermittent connectivity issues between the web tier in VPC A and the database tier in VPC B. You want to identify whether the route configurations, security groups, or network ACLs are causing the issue. Which feature of the VPC Reachability Analyzer can help you determine the root cause of the connectivity issue?
- A
Simulate network reachability between the source and destination resources and identify potential misconfigurations.
- B
Automatically resolve any detected misconfigurations affecting connectivity.
- C
Provide ongoing monitoring of network traffic between the source and destination resources.
- D
Visualize the end-to-end network path and highlight blocked components in the path.
Show answer and explanation
Correct answer: A
Explanation
VPC Reachability Analyzer helps troubleshoot connectivity issues by simulating reachability between resources in a VPC or across VPCs. It identifies potential misconfigurations in resources like route tables, security groups, and network ACLs. This makes it the ideal tool to diagnose the root cause of the intermittent connectivity issue in this scenario.
- A. Correct.
This is correct. VPC Reachability Analyzer allows you to simulate connectivity between resources and identify misconfigurations in routes, security groups, or network ACLs that might be causing the issue.
- B. Incorrect.
This is incorrect. VPC Reachability Analyzer identifies issues but does not automatically resolve them.
- C. Incorrect.
This is incorrect. VPC Reachability Analyzer does not provide ongoing monitoring of network traffic. It performs on-demand analysis to simulate reachability.
- D. Incorrect.
This is incorrect. While VPC Reachability Analyzer provides insights into connectivity, its primary function is to simulate reachability, not visualize the path or highlight blocked components.