AWS Certified Advanced Networking - Specialty ANS-C01 — Topic 1 Question 274

Question

A company has multiple firewalls and ISPs for its on-premises data center. The company has a single AWS Site-to-Site VPN connection from the company's on-premises data center to a transit gateway. A single ISP services the Site-to-Site VPN connection. Multiple VPCs are attached to the transit gateway. A customer gateway that the Site-to-Site VPN connection uses fails. Connectivity is completely lost, but the company's network team does not receive a notification. The network team needs to implement redundancy within a week in case a single customer gateway fails again. The team wants to use an Amazon CloudWatch alarm to send notifications to an Amazon Simple Notification Service (Amazon SNS) topic if any tunnel of the Site-to-Site VPN connection fails. Which solution will meet these requirements MOST cost-effectively?

Accepted Answer

Correct answer: B. The correct answer is B. Option B: Use a second customer gateway and a second ISP. Create a new Site-to-Site VPN connection to the transit gateway. For each VPN connection, set up a CloudWatch TunnelState alarm for the VPN connection. Use a value of le... AWS Transit Gateway centrally connects many VPCs and on-premises networks at scale. AWS Site-to-Site VPN provides encrypted connectivity between on premises and a VPC. Amazon CloudWatch collects metrics, logs and alarms to monitor and react to operational health. This option delivers the requirement at the lowest cost.

AWS Certified Advanced Networking - Specialty ANS-C01 — Question 274