ExamTopics Logo
Mail Us[email protected]
Menu
Amazon Discussions
exam questions

Exam AWS Certified Advanced Networking - Specialty ANS-C01 All Questions

View all questions & answers for the AWS Certified Advanced Networking - Specialty ANS-C01 exam
Go to Exam

Exam AWS Certified Advanced Networking - Specialty ANS-C01 topic 1 question 213 discussion

Exam question from Amazon's AWS Certified Advanced Networking - Specialty ANS-C01
Question #: 213
Topic #: 1
[All AWS Certified Advanced Networking - Specialty ANS-C01 Questions]

A company is replatforming a legacy data processing solution to AWS. The company deploys the solution on Amazon EC2 Instances in private subnets that are in one VPC.

The solution uses Amazon S3 for abject storage. Both the data that the solution processes and the data the solution produces are stored in Amazon S3. The solution uses Amazon DynamoDB to save its own state. The company collects flow logs for the VPC. The solution uses one NAT gateway to register its license through the internet. A software vendor provides a specific hostname so the solution can register its license.

The company notices that the AWS bill exceeds the projected budget for the solution. A network engineer uses AWS Cost Explorer to investigate the bill. The network engineer notices that the USE2-NatGateway-Bytes($) usage type is the root cause of the higher than expected bill.

What should the network engineer do to resolve the issue? (Choose two.)

  • A. Set up Amazon VPC Traffic Mirroring. Analyze the traffic to identify the traffic that the NAT gateway processes.
  • B. Examine the VPC flow logs to identity the traffic that traverses the NAT gateway.
  • C. Set up an AWS Cost and Usage Report in the AWS Billing and Cost Management console. Examine the report to find more details about the NAT gateway charges.
  • D. Verify that the security groups attached to the EC2 instances allow outgoing traffic only to the IP addresses that the hostname resolves to, the VPC CIDR block, and the AWS IP address ranges for Amazon S3 and DynamoDB.
  • E. Verify that the gateway VPC endpoints for Amazon S3 and DynamoDB are both set up and associated with the route tables of the private subnets.
Show Suggested Answer Hide Answer
Suggested Answer: BE 🗳️
by jhon648274 at Aug. 11, 2024, 6:52 p.m.
Disclaimers:
  • - ExamTopics website is not related to, affiliated with, endorsed or authorized by Amazon.
  • - Trademarks, certification & product names are used for reference only and belong to Amazon.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Submit Cancel
AzureDP900
5 months, 2 weeks ago
Selected Answer: BE
B. Examine the VPC flow logs to identify the traffic that traverses the NAT gateway. This can provide insight into what's being processed by the NAT gateway, which may be contributing to the higher-than-expected bill. E. Verify that the gateway VPC endpoints for Amazon S3 and DynamoDB are both set up and associated with the route tables of the private subnets. This will help ensure that data from these services can be accessed through the VPC without using the NAT gateway, which is likely to save on costs. By analyzing the VPC flow logs and verifying the setup of gateway VPC endpoints for Amazon S3 and DynamoDB, the network engineer can gain a better understanding of the traffic patterns and take steps to optimize usage of the NAT gateway.
upvoted 1 times
...
woorkim
6 months, 1 week ago
B,E is answer! B. Examine the VPC flow logs to identify the traffic that traverses the NAT gateway. VPC flow logs provide detailed information about the traffic that flows through the NAT gateway. By analyzing these logs, the network engineer can identify which traffic is unnecessarily routed through the NAT gateway and contributing to the high costs. E. Verify that the gateway VPC endpoints for Amazon S3 and DynamoDB are both set up and associated with the route tables of the private subnets. NAT gateway costs increase because traffic to Amazon S3 and DynamoDB is traversing the NAT gateway instead of using gateway VPC endpoints. Setting up gateway endpoints for these services ensures that traffic stays within the AWS network, eliminating NAT gateway charges for these services.
upvoted 1 times
...
Spaurito
7 months, 3 weeks ago
BE - are correct A - Traffic mirroring not needed and added cost B - Allows to review traffic for the NAT GW C - Cost and Billing Reports will help but not specific traffic details D - Lots of Overhead - This could work but not necessary. E - Verify the S3 and DynamoDB endpoints are configured properly.
upvoted 1 times
...
VerRi
9 months ago
Selected Answer: BE
B. Investigation D. It restricts traffic to the gateway endpoint and the NAT gateway, but it does not provide info about the traffic E. Ensure to use the internal traffic
upvoted 2 times
...
AlirezaNetWorld
9 months, 1 week ago
DE are the right answers.
upvoted 2 times
...
qomtodie
10 months ago
Selected Answer: BE
nerver D
upvoted 1 times
...
cas_tori
10 months ago
Selected Answer: BE
this is BE
upvoted 1 times
...
Cacheirez
10 months, 2 weeks ago
Selected Answer: BE
VPC flow logs will help you identify the specific traffic that is being routed through the NAT gateway. This is crucial for understanding which parts of your architecture are causing the excessive NAT gateway usage. By analyzing these logs, you can pinpoint whether traffic to services like Amazon S3, DynamoDB, or other external services is responsible for the high costs. VPC endpoints (specifically gateway endpoints for S3 and DynamoDB) allow traffic between your VPC and these AWS services to bypass the NAT gateway, thus reducing the data transfer costs associated with the NAT gateway. Ensuring that these endpoints are correctly configured and associated with the route tables of your private subnets will ensure that traffic to S3 and DynamoDB does not unnecessarily traverse the NAT gateway.
upvoted 4 times
...
komorebi
10 months, 2 weeks ago
Selected Answer: BD
Answer is BD
upvoted 1 times
...
jhon648274
10 months, 2 weeks ago
BE Endpoints can be used to access the s3 and dynamodb services at a reduced cost - avoids using nat gateway S3 vpc endpoint gateway is free
upvoted 2 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel