ANS-C01 Question 272
Single answerYou are troubleshooting a connectivity issue in your AWS environment. A web server in a private subnet in your VPC cannot reach the internet through a NAT Gateway located in a public subnet. You want to determine whether the traffic from the web server is reaching the NAT Gateway. Which AWS tool should you use to analyze the connectivity path?
- A
Reachability Analyzer
- B
Route Analyzer
- C
VPC Flow Logs
- D
AWS Trusted Advisor
Show answer and explanation
Correct answer: A
Explanation
The Reachability Analyzer is specifically designed to analyze and verify the network path between two resources in a VPC. It evaluates key components such as route tables, security groups, and network ACLs, making it the ideal tool for determining whether traffic can reach the NAT Gateway from the web server. Other options, like VPC Flow Logs, provide monitoring capabilities but do not offer the path analysis required in this scenario.
- A. Correct.
Reachability Analyzer is the correct tool for this scenario as it allows you to analyze the network path and determine if traffic can flow between two resources in a VPC. It checks routes, security groups, and other configurations.
- B. Incorrect.
Route Analyzer is not an AWS tool. While it sounds similar to Reachability Analyzer, it is not a valid option for analyzing connectivity paths in AWS.
- C. Incorrect.
VPC Flow Logs can help you monitor and log traffic at a granular level, but it does not analyze or verify connectivity paths between resources.
- D. Incorrect.
AWS Trusted Advisor provides recommendations for best practices and cost optimization. It is not designed for troubleshooting connectivity issues or analyzing network paths.