ANS-C01 Question 383
Select 2You are managing a complex AWS network that uses Transit Gateway to connect multiple VPCs and on-premises networks. Recently, users reported connectivity issues between specific VPCs. You need to identify the issue and validate the network's routing configuration. Which combination of tools should you use to diagnose and resolve the problem?
- A
AWS Reachability Analyzer to simulate and analyze the network path between the source and destination
- B
Transit Gateway Network Manager to visualize and monitor the Transit Gateway attachments and routing tables
- C
Amazon CloudWatch Logs to check for detailed logs of network activity and issues
- D
AWS Config to ensure compliance of Transit Gateway routing table configurations
- E
AWS Trusted Advisor to provide routing optimization recommendations
Show answer and explanation
Correct answers: A, B
Explanation
To diagnose and resolve routing issues in a complex AWS network using Transit Gateway, AWS Reachability Analyzer and Transit Gateway Network Manager are the most suitable tools. Reachability Analyzer helps identify connectivity issues like misconfigured security groups or route tables, while the Network Manager provides a centralized view of the Transit Gateway topology and routing configurations, enabling efficient troubleshooting.
- A. Correct.
Correct: AWS Reachability Analyzer is specifically designed to analyze and simulate end-to-end network reachability between resources. It helps identify misconfigured routes, security group settings, or NACL rules causing connectivity issues.
- B. Correct.
Correct: Transit Gateway Network Manager provides a centralized view and monitoring capabilities for Transit Gateway attachments, routing tables, and network topology. It can help identify misconfigured routes or connectivity gaps.
- C. Incorrect.
Incorrect: While Amazon CloudWatch Logs provide valuable network activity insights, they are not specifically designed for diagnosing routing issues between VPCs or Transit Gateway attachments.
- D. Incorrect.
Incorrect: AWS Config can track configuration changes and compliance but is not a tool for diagnosing routing or connectivity issues.
- E. Incorrect.
Incorrect: AWS Trusted Advisor focuses on best practices and cost optimization recommendations but does not provide routing diagnostics or troubleshooting capabilities.