ExamTopics Logo
Mail Us[email protected]
Menu
Amazon Discussions
exam questions

Exam AWS Certified Advanced Networking - Specialty ANS-C01 All Questions

View all questions & answers for the AWS Certified Advanced Networking - Specialty ANS-C01 exam
Go to Exam

Exam AWS Certified Advanced Networking - Specialty ANS-C01 topic 1 question 180 discussion

Exam question from Amazon's AWS Certified Advanced Networking - Specialty ANS-C01
Question #: 180
Topic #: 1
[All AWS Certified Advanced Networking - Specialty ANS-C01 Questions]

A company has a transit gateway in AWS Account A. The company uses AWS Resource Access Manager (AWS RAM) to share the transit gateway so that users in other accounts can connect to multiple VPCs in the same AWS Region. AWS Account B contains a VPC (10.0.0.0/16) with subnet 10.0.0.0/24 in the us-west-2a Availability Zone and subnet 10.0.1.0/24 in the us-west-2b Availability Zone. Resources in these subnets can communicate with other VPCs.

A network engineer creates two new subnets: 10.0.2.0/24 in the us-west-2b Availability Zone and 10.0.3.0/24 in the us-west-2c Availability Zone. All the subnets share one route table. The default route 0.0.0.0/0 is pointing to the transit gateway. Resources in subnet 10.0.2.0/24 can communicate with other VPCs, but resources in subnet 10.0.3.0/24 cannot communicate with other VPCs.

What should the network engineer do so that resources in subnet 10.0.3.0/24 can communicate with other VPCs?

  • A. In Account B, add 10.0.2.0/24 and 10.0.3.0/24 as the destinations to the route table. Use the transit gateway as the target.
  • B. In Account B, update the transit gateway attachment. Attach the new subnet ID that is associated with us-west-2c to Account B's VPC.
  • C. In Account A, create a static route for 10.0.3.0/24 in the transit gateway route tables.
  • D. In Account A, recreate propagation for 10.0.0.0/16 in the transit gateway route tables.
Show Suggested Answer Hide Answer
Suggested Answer: B 🗳️
by KobDragoon at March 31, 2024, 9:59 p.m.
Disclaimers:
  • - ExamTopics website is not related to, affiliated with, endorsed or authorized by Amazon.
  • - Trademarks, certification & product names are used for reference only and belong to Amazon.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Submit Cancel
acloudguru
Highly Voted 11 months, 2 weeks ago
Selected Answer: B
Option C is incorrect because the transit gateway route tables are managed by Account A, which owns the transit gateway. Account B cannot modify the route tables in Account A's transit gateway. Option D is incorrect because propagation is not relevant in this scenario. Propagation is used when you have multiple transit gateways in different AWS Regions, and you want to propagate routes between them.
upvoted 6 times
...
KobDragoon
Highly Voted 1 year ago
Selected Answer: C
If all subnets share one route table then new subnet in AZ C should also have a route to the TGW, and we don't need necessarily a TGW attachment associated with the new subnet C, it should be able to route to the existing TGW attachments inside the VPC. Only answer that makes sense to me then is C if we assume that Account B doesn't have route propagation enabled by default and the TGW route tables are using instead static routes. This would explain why traffic can't reach the new subnet but can reach the others.
upvoted 6 times
6e5b127
8 months, 3 weeks ago
Resources that reside in Availability Zones where there is no transit gateway attachment cannot reach the transit gateway even though route table is set up. You need to assciate at least one subnet in even AZ. So the answer is B.
upvoted 4 times
...
...
Spaurito
Most Recent 5 months, 1 week ago
B - The new subnet is in a new AZ. If not associated to the TGW, then it won't communicate. The new AZ is key here.
upvoted 1 times
...
siheom
8 months ago
Selected Answer: B
vote B
upvoted 3 times
...
kajiyatta
9 months, 1 week ago
When you attach a VPC to a transit gateway, you must specify one subnet from each Availability Zone to be used by the transit gateway to route traffic. Specifying one subnet from an Availability Zone enables traffic to reach resources in every subnet in that Availability Zone. https://docs.aws.amazon.com/vpc/latest/tgw/tgw-vpc-attachments.html
upvoted 2 times
...
hedglin
9 months, 2 weeks ago
The correct answer is B: In Account B, update the transit gateway attachment. Attach the new subnet ID that is associated with us-west-2c to Account B's VPC. C is wrong. Creating a static route in Account A's transit gateway route tables is not necessary and wouldn't solve the issue, as the problem is with the attachment, not routing.
upvoted 1 times
...
seochan
10 months, 2 weeks ago
Selected Answer: C
There’s no such thing as ‘Attach the new subnet ID’ in TGW attachments.
upvoted 1 times
...
Kupaloid
11 months ago
Selected Answer: B
The most likely cause is that the new subnet has not been attached to the transit gateway.
upvoted 4 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago