ANS-C01 Question 116
Single answerYour organization has deployed a multi-tier application in AWS using Amazon VPC. Recently, users reported connectivity issues between the application servers in a private subnet and the database servers hosted in another private subnet within the same VPC. You suspect a misconfiguration in the security groups or route tables. How can you quickly identify and troubleshoot the connectivity issue using the VPC Reachability Analyzer?
- A
Run a Reachability Analyzer analysis specifying the source as the application server ENI and the destination as the database server ENI.
- B
Enable VPC Flow Logs and analyze the logs for dropped traffic between the application and database servers.
- C
Run a Reachability Analyzer analysis specifying the source as the application server instance ID and the destination as the database server subnet ID.
- D
Use Reachability Analyzer to validate the connectivity by testing all possible paths within the VPC.
Show answer and explanation
Correct answer: A
Explanation
VPC Reachability Analyzer is a tool designed to analyze and identify connectivity issues between resources in a VPC. By specifying the source and destination resources, such as ENIs, it evaluates the network path and checks for misconfigurations in route tables, security groups, and network ACLs. This makes it a powerful tool for troubleshooting connectivity issues efficiently.
- A. Correct.
Correct. Reachability Analyzer can analyze connectivity between specific resources, such as ENIs, to identify misconfigurations in security groups or route tables.
- B. Incorrect.
Incorrect. While VPC Flow Logs can help analyze traffic patterns and dropped packets, they are not as effective as the Reachability Analyzer for pinpointing misconfigurations like security group or route table issues.
- C. Incorrect.
Incorrect. Reachability Analyzer requires specific resource identifiers like ENIs for the source and destination, rather than subnet IDs.
- D. Incorrect.
Incorrect. Reachability Analyzer does not test all possible paths automatically; you must specify the source and destination for the analysis.