ANS-C01 Question 117
Select 3You are managing a multi-tier architecture in AWS with a private VPC that includes a web tier, an application tier, and a database tier. Recently, users reported that the web application is unable to connect to the backend database. To troubleshoot the issue, you decide to use the VPC Reachability Analyzer. Which of the following steps should you take to identify and resolve the connectivity issue?
- A
Specify the source as the web tier's Elastic Load Balancer and the destination as the database instance in the VPC Reachability Analyzer.
- B
Manually create flow logs for the web tier to inspect traffic and compare with the VPC Reachability Analyzer results.
- C
Verify security groups and network ACLs using the results from the VPC Reachability Analyzer.
- D
Enable VPC Reachability Analyzer automatic remediation to fix the identified issue.
- E
Use the VPC Reachability Analyzer to validate connectivity between the application tier and the database tier.
Show answer and explanation
Correct answers: A, C, E
Explanation
The VPC Reachability Analyzer is a powerful tool to diagnose connectivity issues within a VPC. In this scenario, the correct steps involve using the tool to specify the source and destination, validating connectivity between tiers, and using its results to identify misconfigurations in security groups or network ACLs. While flow logs can provide additional details, they are not directly needed to use the VPC Reachability Analyzer. Additionally, the tool does not provide automatic remediation, so manual intervention is required to fix identified issues.
- A. Correct.
This is a correct step. The VPC Reachability Analyzer requires specifying a source and destination to analyze connectivity. Using the web tier's Elastic Load Balancer and the database instance is appropriate for this scenario.
- B. Incorrect.
While flow logs are useful for network traffic analysis, they are not required to use the VPC Reachability Analyzer or to identify issues in this specific scenario.
- C. Correct.
This is a correct step. VPC Reachability Analyzer provides insights into configuration issues such as misconfigured security groups and network ACLs, which should be checked and corrected as needed.
- D. Incorrect.
VPC Reachability Analyzer does not provide automatic remediation. It only identifies issues; resolving them is a manual process.
- E. Correct.
This is a correct step. Validating connectivity between the application tier and the database tier can help isolate where the connectivity breaks in the architecture.