ANS-C01 Question 409
Select 2An organization is running applications on Amazon EC2 instances in a VPC and needs to manage traffic between instances within the same VPC and across peered VPCs. Additionally, they want to ensure that network traffic for specific workloads is isolated while allowing other workloads to share the same network infrastructure. Which combination of network interfaces should they use to achieve this?
- A
Primary network interfaces for the EC2 instances and secondary network interfaces for traffic isolation
- B
Elastic Network Interfaces (ENIs) to attach additional IP addresses for application-specific traffic
- C
NAT Gateway interfaces for routing traffic between peered VPCs
- D
Trunk network interfaces for managing VLAN-tagged traffic within the VPC
- E
Elastic Fabric Adapters (EFAs) for enabling high-performance networking between instances within the VPC
Show answer and explanation
Correct answers: A, B
Explanation
To manage traffic within a VPC and across peered VPCs while ensuring traffic isolation for specific workloads, the organization can use primary and secondary ENIs. Primary network interfaces are automatically associated with each EC2 instance, and secondary network interfaces can be used to segregate traffic for specific workloads. Additionally, ENIs allow attaching multiple IP addresses to instances, which can help in isolating application-specific traffic. Other options like NAT Gateway interfaces, trunk interfaces, or Elastic Fabric Adapters do not align with the requirements of this scenario.
- A. Correct.
Correct. Primary network interfaces are automatically created with EC2 instances and secondary network interfaces can be used for traffic isolation by attaching them to specific instances or workloads.
- B. Correct.
Correct. Elastic Network Interfaces (ENIs) are flexible and can be used to attach multiple IP addresses to an instance, enabling application-specific traffic segregation or isolation.
- C. Incorrect.
Incorrect. NAT Gateway interfaces are used for allowing private instances to access the internet, but they are not relevant for managing traffic between instances within or across VPCs.
- D. Incorrect.
Incorrect. Trunk network interfaces are used in scenarios involving VLAN-tagged traffic, which is not a requirement in this scenario.
- E. Incorrect.
Incorrect. Elastic Fabric Adapters (EFAs) are designed for high-performance computing and low-latency communication, but they do not provide traffic isolation or manage traffic between VPCs.