ANS-C01 Question 384
Select 3You are managing a complex multi-region AWS network that uses AWS Transit Gateway to interconnect multiple VPCs and on-premises networks. Recently, one of your applications has been experiencing connectivity issues between its VPC in Region A and an on-premises data center connected to Region B's Transit Gateway. Which combination of tools can you use to analyze and troubleshoot the routing patterns and identify the root cause of the issue?
- A
AWS Reachability Analyzer to simulate and analyze packet flow between the VPC in Region A and the on-premises data center
- B
Transit Gateway Network Manager to visualize and monitor the status and routing configuration of the Transit Gateways in both regions
- C
Amazon CloudWatch Logs to directly debug and analyze the routing table configurations of the Transit Gateways
- D
VPC Flow Logs to inspect traffic patterns and determine if the packets are being dropped at any network interface
- E
AWS Config to review compliance rules for the Transit Gateway routing tables
Show answer and explanation
Correct answers: A, B, D
Explanation
To effectively troubleshoot the connectivity issue, AWS Reachability Analyzer can be used to simulate the network path and identify any misconfigurations in routing. Transit Gateway Network Manager offers a centralized view of Transit Gateway configurations to help identify regional routing discrepancies. VPC Flow Logs further provide insights into traffic patterns and possible packet drops. Together, these tools provide comprehensive visibility into routing and connectivity issues, making them the most suitable choices for this scenario.
- A. Correct.
AWS Reachability Analyzer is designed to simulate packet paths and determine whether a specific destination is reachable. It helps identify any misconfigurations or routing issues in the path.
- B. Correct.
Transit Gateway Network Manager provides a centralized view of your Transit Gateway configurations and can help you monitor and troubleshoot routing issues across regions and connected networks.
- C. Incorrect.
Amazon CloudWatch Logs is not directly used for analyzing routing tables or network path issues. While logs can be helpful in other contexts, routing-specific analysis requires tools like Reachability Analyzer and Network Manager.
- D. Correct.
VPC Flow Logs provide visibility into network traffic at the network interface level, which can help you identify if packets are being dropped due to ACLs, security groups, or other reasons.
- E. Incorrect.
AWS Config is focused on compliance and resource configuration history but does not provide tools for analyzing real-time routing or traffic patterns.