MENU
An organization is using a VPC endpoint for Amazon S3. When the security group rules for a set of instances were initially configured, access was restricted to allow traffic only to the IP addresses of the Amazon S3 API endpoints in the region from the published JSON file. The application was working properly, but now is logging a growing number of timeouts when connecting with Amazon S3. No internet gateway is configured for the VPC.
Which solution will fix the connectivity failures with the LEAST amount of effort?
Suggested Answer: B
Get Premium ANS-C01 Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
42 comments · newest first
AI
Aileen
11 months ago
Wait, why would you need an additional VPC endpoint? That seems unnecessary!
LE
Lelia
11 months ago
Option B could also work, but it sounds more complex.
BR
Brice
11 months ago
Not so sure about that, what if the prefix-list changes again?
TI
Tijuana
11 months ago
Totally agree, C makes the most sense here!
HY
Hyun
12 months ago
I think option C is the easiest fix. Just update the security group.
AN
Antonio
12 months ago
I feel like adding another VPC endpoint could help with scaling, but I'm not convinced it's the least effort solution.
ST
Stephania
1 year ago
I practiced a similar question where we had to deal with VPC endpoints, and I think creating a Lambda function sounds like overkill for this situation.
SA
Sabine
1 year ago
I’m not entirely sure, but I think updating the security group might be more straightforward than messing with routing tables.
BU
Buck
1 year ago
I remember something about prefix lists being easier to manage than individual IP addresses, so maybe option C is the way to go?
YV
Yvonne
1 year ago
Ah, I see what's going on now. The security group rules are outdated, and we need a way to keep them up-to-date automatically. Option A with the Lambda function seems like the most efficient approach.
HA
Harris
1 year ago
Okay, I think I've got it. The issue is that the security group rules are too restrictive, and we need to update the routing to use the VPC endpoint properly. Option B looks like the cleanest solution.
LI
Lilli
1 year ago
Hmm, the key here is to find the solution that requires the least amount of effort. I think option B might be the way to go, but I'll need to double-check the details.
ST
Stephen
1 year ago
This seems like a tricky one. I'm not sure if I fully understand the problem yet, but I'll try to break it down step-by-step.
LA
Lashawnda
1 year ago
This is a good one. I'm leaning towards option C, since it seems the most straightforward way to update the security group rules without having to deal with the routing or additional VPC endpoints.
SH
Sharmaine
1 year ago
Hmm, this looks like it's testing my understanding of how the Deep Security policy settings work. I'll need to carefully read through the options and think about the differences between inherited and explicitly set module states.
CA
Carmen
1 year ago
I'm a bit confused about how the gifts to the charity affect the taxable amount. I thought charitable gifts were fully deductible, so maybe that means it would be 0?
SH
Shenika
1 year ago
Hmm, I'm not sure about this one. I know Proof of Work is the most well-known, but I've heard Proof of Stake is gaining traction for sustainability. I'll have to think this through carefully.
TA
Tatum
1 year ago
I'd just tell the application to stop timing out. Problem solved! But in all seriousness, C looks like the way to go.
PO
Portia
1 year ago
Let's go with C then.
CE
Cecil
1 year ago
I agree, updating the application server's outbound security group seems like the simplest solution.
CA
Carol
1 year ago
I think C is the best option here.
BI
Billye
1 year ago
You know, this reminds me of that time I accidentally locked myself out of my own VPC. Good times. Anyway, I'm with the crowd on C - keep it simple, silly!
AL
Albert
1 year ago
I agree, let's go with option C.
RI
Rikki
1 year ago
Yeah, updating the outbound security group sounds like the easiest solution.
KA
Kandis
1 year ago
I think C is the way to go. Keep it simple.
LO
Lorita
1 year ago
I'd be careful with that Lambda function idea. Seems like adding another moving part might just complicate things further. C looks like the way to go here.
TE
Teddy
2 years ago
Hmm, I see what they're getting at. Updating the routing table might be a bit overkill. I'm leaning towards C as well, seems the most straightforward solution.
GE
Gennie
1 year ago
Creating a Lambda function might be too complex for this issue.
EZ
Ezekiel
1 year ago
I'm not sure, but updating the security group does sound like a good idea.
HE
Helene
1 year ago
Agreed, it seems like the simplest solution.
RO
Royce
1 year ago
I think C is the best option here.
JU
Justine
2 years ago
I'm not sure, but creating a Lambda function to update the security group also sounds like a good solution.
RO
Rocco
2 years ago
I agree with Carri, that option seems like it would require the least amount of effort.
CA
Carri
2 years ago
I think the best solution is to update the VPC routing to direct Amazon S3 traffic to the VPC endpoint.
KI
Kimbery
2 years ago
Ah, the good old AWS VPC endpoint debacle. Classic networking challenge right here. I'm going with option C - updating the security group seems like the quickest fix to me.
SU
Sueann
1 year ago
Maybe, but updating the security group is the quickest solution.
BR
Brianne
1 year ago
But wouldn't creating a Lambda function be more efficient?
RO
Royce
1 year ago
I agree, updating the security group should do the trick.
LO
Loise
1 year ago
Option C sounds like the easiest fix.
CH
Cherrie
2 years ago
That could work too, but I think updating the application server's outbound security group might be a quicker solution.
JE
Jerilyn
2 years ago
I disagree, I believe creating a Lambda function to update the security group based on AmazonIPSpaceChanged notifications is the easiest fix.
CH
Cherrie
2 years ago
I think the best solution is to update the VPC routing to direct Amazon S3 traffic to the VPC endpoint.