An education agency is preparing for its annual competition between schools. In the competition, students at schools from around the country solve math problems, complete puzzles, and write essays. The IP addressing plan of all the schools is well-known and is administered centrally. The competition is hosted in the AWS Cloud and is not publicly available. All competition traffic must be encrypted in transit. Only authorized endpoints can access the competition. All the schools have firewall policies that block ICMP traffic. A network engineer builds a solution in which all the schools access the competition through AWS Site-to-Site VPN connections. The network engineer uses BGP as the routing protocol. The network engineer must implement a solution that notifies schools when they lose connectivity and need to take action on their premises to address the issue. Which combination of steps will meet these requirements MOST cost-effectively? (Choose two.)
Select 2 answers.
Marked answer: A
This question asks for 2 answers, but our data marks only 1. Compare with the community discussion below for the full answer.
Community Discussion
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
Chose AE3
B: Pinging customer gateway devices is not viable since the schools block ICMP traffic. This option would fail due to the schools' firewall policies. C: While VPC Reachability Analyzer is a powerful tool, using it for frequent connectivity checks is more complex and potentially costlier than leveraging existing metrics and route table monitoring. D: CloudWatch dashboards are useful for monitoring but do not provide proactive notifications. They require someone to manually review the data, which does not align with the requirement for automated notifications.
2
AE - This seems to be the best answer. You could use option C but the cost would add up. Monitoring the Route Table and having a CloudWatch monitor makes the most sense.
