AWS Certified Advanced Networking - Specialty ANS-C01 — Topic 1 Question 276

Question

A company is setting up an AWS Direct Connect connection between the company's on-premises data center and AWS. The company currently has a single VPC in its AWS account. The on-premises data center uses the 172.16.0.0/16 CIDR block, and the VPC uses the 10.1.1.0/24 CIDR block. The company associates the Direct Connect connection to one private VIF. A network engineer receives reports that SSH communication from hosts that are in the company's on-premises data center to Amazon EC2 instances that are deployed in the company's VPC is failing. The network engineer investigates and finds that the VIF is up and a BGP peering session has been established properly. Which steps should the engineer take to troubleshoot this issue? (Choose three.)

Accepted Answer

Correct answer: A, D, E. The correct answer is A, D, E. Option A: Ensure that the advertised route for the on-premises network is present in the VPC route tables. Ensure that the VPC's subnets are present in the route tables of the on-premises network equipment. Option D: Ensure that the VPC network ACLs allow inbound and outbound traffic for the on-premises network prefix. Option E: Ensure that the security groups for the EC2 instances allow inbound SSH communication from the on-premises network prefix. Amazon EC2 provides resizable virtual servers when you need full control of the operating system.

AWS Certified Advanced Networking - Specialty ANS-C01 — Question 276