ANS-C01 Question 382
Select 2Your company leverages AWS Transit Gateway to manage connectivity between multiple VPCs and on-premises data centers. Recently, a specific application in one of the VPCs has been unable to communicate with a database hosted in another VPC. As the network administrator, you need to analyze the routing issue and identify whether the Transit Gateway routing tables, security groups, or NACLs are causing the problem. Which AWS tools can help you pinpoint the root cause?
- A
AWS Reachability Analyzer
- B
AWS Transit Gateway Network Manager
- C
AWS CloudTrail
- D
Amazon CloudWatch Logs
- E
VPC Flow Logs
Show answer and explanation
Correct answers: A, B
Explanation
AWS Reachability Analyzer and AWS Transit Gateway Network Manager are the most appropriate tools for analyzing routing patterns and issues involving Transit Gateways. Reachability Analyzer provides end-to-end analysis of network paths, including routing and security configurations, while Transit Gateway Network Manager offers centralized visibility into Transit Gateway routing tables and their configurations. Together, these tools simplify network troubleshooting and help quickly identify and resolve connectivity problems.
- A. Correct.
AWS Reachability Analyzer is specifically designed to analyze routing issues and determine whether a network path is reachable between a source and destination. It provides detailed insights into where routing or security configurations might be blocking traffic.
- B. Correct.
AWS Transit Gateway Network Manager helps monitor and manage Transit Gateways across multiple regions and accounts. It provides visibility into the routing tables and helps troubleshoot routing issues in Transit Gateway setups.
- C. Incorrect.
AWS CloudTrail primarily tracks API calls and user activities for auditing and compliance, but it does not directly help analyze routing patterns or diagnose connectivity issues.
- D. Incorrect.
Amazon CloudWatch Logs is useful for monitoring and logging events but does not offer specific analysis tools for routing issues or network reachability.
- E. Incorrect.
VPC Flow Logs help capture network traffic metadata but require manual analysis to determine routing or connectivity issues, making them less effective for pinpointing issues compared to Reachability Analyzer or Transit Gateway Network Manager.