ExamTopics Logo
Mail Usteam@examtopics.com
Menu
Amazon Discussions
exam questions

Exam AWS Certified Advanced Networking - Specialty ANS-C01 All Questions

View all questions & answers for the AWS Certified Advanced Networking - Specialty ANS-C01 exam
Go to Exam

Exam AWS Certified Advanced Networking - Specialty ANS-C01 topic 1 question 112 discussion

Exam question from Amazon's AWS Certified Advanced Networking - Specialty ANS-C01
Question #: 112
Topic #: 1
[All AWS Certified Advanced Networking - Specialty ANS-C01 Questions]

A company recently started using AWS Client VPN to give its remote users the ability to access resources in multiple peered VPCs and resources in the company's on-premises data center. The Client VPN endpoint route table has a single entry of 0.0.0.0/0. The Client VPN endpoint is using a new security group that has no inbound rules and a single outbound rule that allows all traffic to 0.0.0.0/0.

Multiple remote users report that web search results are showing incorrect geographic location information for the users.

Which combination of steps should a network engineer take to resolve this issue with the LEAST amount of service interruption? (Choose three.)

  • A. Switch users to AWS Site-to-Site VPNs.
  • B. Enable the split-tunnel option on the Client VPN endpoint.
  • C. Add routes for the peered VPCs and for the on-premises data center to the Client VPN route table.
  • D. Remove the 0.0.0.0/0 outbound rule from the security group that the Client VPN endpoint uses.
  • E. Delete and recreate the Client VPN endpoint in a different VPC.
  • F. Remove the 0.0.0.0/0 entry from the Client VPN endpoint route table.
Show Suggested Answer Hide Answer
Suggested Answer: BCF 🗳️
Community vote distribution
BCF (100%)
by Balasmaniam at June 9, 2023, 11:30 a.m.
Disclaimers:
  • - ExamTopics website is not related to, affiliated with, endorsed or authorized by Amazon.
  • - Trademarks, certification & product names are used for reference only and belong to Amazon.

Comments

Chosen Answer:
This is a voting comment. You can switch to a simple comment. It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Submit Cancel
Balasmaniam
Highly Voted 1 year, 4 months ago
Selected Answer: BCF
https://docs.aws.amazon.com/vpn/latest/clientvpn-admin/split-tunnel-vpn.html
upvoted 10 times
...
Maxyz42
Most Recent 1 month, 3 weeks ago
Selected Answer: BCF
Split tunnel divides the Internet traffic and corpora VPN network traffic so you can route only specific traffic over the client VPN.
upvoted 1 times
...
Marfee400704
8 months, 1 week ago
I think that it's correct answer is BCF according to SPOTO products.
upvoted 1 times
...
Neo00
1 year, 3 months ago
BCF Split tunnel allows only 'Internal' destination traffic will be sent to VPN tunnel and remove '0.0.0.0' default routing from route table allows internet traffic go through user's local internet provider
upvoted 1 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
exam
Someone Bought Contributor Access for:
MD-102
Dallas, 1 minute ago