Welcome to ExamTopics
ExamTopics Logo
- Expert Verified, Online, Free.
exam questions

Exam AWS Certified Advanced Networking - Specialty ANS-C01 All Questions

View all questions & answers for the AWS Certified Advanced Networking - Specialty ANS-C01 exam

Exam AWS Certified Advanced Networking - Specialty ANS-C01 topic 1 question 112 discussion

A company recently started using AWS Client VPN to give its remote users the ability to access resources in multiple peered VPCs and resources in the company's on-premises data center. The Client VPN endpoint route table has a single entry of 0.0.0.0/0. The Client VPN endpoint is using a new security group that has no inbound rules and a single outbound rule that allows all traffic to 0.0.0.0/0.

Multiple remote users report that web search results are showing incorrect geographic location information for the users.

Which combination of steps should a network engineer take to resolve this issue with the LEAST amount of service interruption? (Choose three.)

  • A. Switch users to AWS Site-to-Site VPNs.
  • B. Enable the split-tunnel option on the Client VPN endpoint.
  • C. Add routes for the peered VPCs and for the on-premises data center to the Client VPN route table.
  • D. Remove the 0.0.0.0/0 outbound rule from the security group that the Client VPN endpoint uses.
  • E. Delete and recreate the Client VPN endpoint in a different VPC.
  • F. Remove the 0.0.0.0/0 entry from the Client VPN endpoint route table.
Show Suggested Answer Hide Answer
Suggested Answer: BCF 🗳️

Comments

Chosen Answer:
This is a voting comment (?) , you can switch to a simple comment.
Switch to a voting comment New
Balasmaniam
Highly Voted 1 year, 5 months ago
Selected Answer: BCF
https://docs.aws.amazon.com/vpn/latest/clientvpn-admin/split-tunnel-vpn.html
upvoted 10 times
...
Marfee400704
Most Recent 8 months, 3 weeks ago
I think that it's correct answer is BCF according to SPOTO products.
upvoted 1 times
...
Neo00
1 year, 3 months ago
BCF Split tunnel allows only 'Internal' destination traffic will be sent to VPN tunnel and remove '0.0.0.0' default routing from route table allows internet traffic go through user's local internet provider
upvoted 1 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...