Exam ANS-C00 topic 1 question 71 discussion

Exam question from Amazon's ANS-C00

Question #: 71
Topic #: 1

All IP addresses within a 10.0.0.0/16 VPC are fully utilized with application servers across two Availability Zones. The application servers need to send frequent
UDP probes to a single central authentication server on the Internet to confirm that it is running up-to-date packages. The network is designed for application servers to use a single NAT gateway for internal access. Testing reveals that a few of the servers are unable to communicate with the authentication server.
What is the reason for this failure?

A. The NAT gateway does not support UDP traffic.
B. The authentication server is not accepting traffic.
C. The NAT gateway cannot allocate more ports.
D. The NAT gateway is launched in a private subnet.

Show Suggested Answer

Suggested Answer: C 🗳️

by cardiryh at Nov. 12, 2020, 10:26 a.m.

Disclaimers:

- ExamTopics website is not related to, affiliated with, endorsed or authorized by Amazon.
- Trademarks, certification & product names are used for reference only and belong to Amazon.

Comments

Submit Cancel

cardiryh

Highly Voted 3 years, 7 months ago

C is correct

upvoted 9 times

...

Ishu_awsguy

Highly Voted 3 years, 7 months ago

C is right. There is a limit of 55000 outbound connections to the same destination. And anyways if you want to save inter AZ data transfer cost . use NAT gateways in respective AZ

upvoted 7 times

...

Raphaello

Most Recent 1 year, 1 month ago

Selected Answer: C

C is correct.

upvoted 1 times

...

squeeze_talus0y

2 years, 8 months ago

Selected Answer: C

https://docs.aws.amazon.com/vpc/latest/userguide/vpc-nat-gateway.html#nat-gateway-basics

upvoted 2 times

...

ChauPhan

3 years, 6 months ago

10.0.0.0/16 is fully utilized, means 2^16 = 65536 IPs are used. the port range is same: from 0 - 65535, so sometimes, the ports are used up. Go with C