SOA-C02 Question 288
Select 4Your company has a hybrid cloud architecture with an AWS Direct Connect connection established between your on-premises data center and your AWS VPC. Recently, on-premises applications have been experiencing intermittent connectivity issues when accessing resources in the VPC. Upon investigation, you notice that the issue began after new network routes were added to the on-premises router. Which of the following steps should you take to troubleshoot and resolve the issue?
- A
Verify that the prefix list for the advertised routes in the on-premises router matches the routes allowed in the VPC route table.
- B
Check the status of the Direct Connect virtual interface (VIF) in the AWS Management Console.
- C
Ensure that the security groups and network ACLs are configured to allow traffic from the on-premises network to the VPC.
- D
Review and increase the MTU (Maximum Transmission Unit) size on the Direct Connect connection to improve performance.
- E
Inspect the BGP (Border Gateway Protocol) session on both ends to confirm that routes are being properly advertised and received.
Show answer and explanation
Correct answers: A, B, C, E
Explanation
When troubleshooting hybrid connectivity issues, it's essential to verify routing configurations, the status of the Direct Connect virtual interface, and the proper advertisement and receipt of routes via BGP. Additionally, AWS network-specific controls such as security groups and network ACLs must be properly configured. Increasing MTU is unrelated to routing or intermittent connectivity and is not a valid troubleshooting step in this scenario.
- A. Correct.
Correct. If the prefix list in the on-premises router advertises routes that are not allowed in the VPC route table, traffic may be dropped, leading to connectivity issues.
- B. Correct.
Correct. The Direct Connect virtual interface (VIF) status is critical for diagnosing connectivity issues. If the VIF is down, connectivity would be impacted.
- C. Correct.
Correct. Security groups and network ACLs need to allow traffic from the specified on-premises IP ranges; otherwise, traffic will be blocked even if routing is correct.
- D. Incorrect.
Incorrect. While MTU size can impact performance, increasing it arbitrarily will not resolve routing-related or intermittent connectivity issues.
- E. Correct.
Correct. BGP is crucial for route advertisement between on-premises and AWS. Misconfigured or down BGP sessions can cause routes to not propagate, resulting in connectivity issues.