ANS-C01 Question 228
Single answerYou have deployed a VPC with multiple subnets in different Availability Zones (AZs) and set up a peering connection between this VPC and another VPC in a different AWS account. Instances in Subnet A of your VPC are unable to communicate with instances in Subnet B of the peered VPC. You suspect a configuration issue and want to identify the root cause. Which AWS service or tool can you use to analyze and test the connectivity between these instances?
- A
Reachability Analyzer
- B
Route Analyzer
- C
AWS Trusted Advisor
- D
AWS Config
Show answer and explanation
Correct answer: A
Explanation
Reachability Analyzer is a powerful tool in AWS that allows you to trace the network path between resources in your VPC or across VPCs (such as those connected via peering). It identifies potential network misconfigurations, such as missing routes, security group rules, or NACL rules, that may block connectivity. In this scenario, where instances in different VPCs cannot communicate, Reachability Analyzer is the appropriate tool to diagnose and resolve the issue.
- A. Correct.
Reachability Analyzer is the correct service to test connectivity between resources in a VPC or across peered VPCs. It traces network paths and identifies any misconfigurations preventing connectivity.
- B. Incorrect.
Route Analyzer is not an AWS tool. This is a distractor and does not exist in AWS services.
- C. Incorrect.
AWS Trusted Advisor provides recommendations for cost optimization, performance, security, and fault tolerance but does not analyze network connectivity.
- D. Incorrect.
AWS Config helps track configuration changes and compliance but does not perform connectivity testing or analysis.