ANS-C01 Question 230
Single answerYour company has a VPC with several private subnets hosting critical services. Recently, some instances in a private subnet are unable to communicate with an on-premises application over a VPN connection. You suspect a routing or security issue. Which AWS tool would you use to verify the traffic path and identify connectivity issues?
- A
AWS Reachability Analyzer
- B
AWS CloudTrail
- C
AWS Route Analyzer
- D
Amazon VPC Flow Logs
Show answer and explanation
Correct answer: A
Explanation
AWS Reachability Analyzer is the appropriate tool for this scenario as it allows you to test connectivity between resources in your VPC and diagnose issues related to routing, security groups, and network ACLs. Other options either do not exist (Route Analyzer) or are not designed for this specific purpose (CloudTrail, VPC Flow Logs).
- A. Correct.
AWS Reachability Analyzer is specifically designed to analyze and verify network paths within a VPC, including routes, security groups, and network ACLs, making it the ideal tool for identifying connectivity issues.
- B. Incorrect.
AWS CloudTrail is primarily used for auditing and recording API calls and actions taken in your AWS environment. While useful for tracking changes, it is not designed for real-time connectivity analysis.
- C. Incorrect.
AWS Route Analyzer is not an existing AWS service. This is a distractor option.
- D. Incorrect.
Amazon VPC Flow Logs capture information about the IP traffic to and from network interfaces within a VPC. While useful for debugging, they do not provide path analysis or verify connectivity.