MENU
A banking company has an application that must connect to specific public IP addresses from a VPC. A network engineer has configured routes in the route table that is associated with the application's subnet to the required public IP addresses through an internet gateway.
The network engineer needs to set up email notifications that will alert the network engineer when a user adds a default route to the application subnet's route table with the internet gateway as a target.
Which solution will meet these requirements with the LEAST implementation effort?
Suggested Answer: C
Get Premium ANS-C01 Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
34 comments · newest first
JO
Johnson
9 months ago
I’m surprised they didn’t mention using CloudTrail for this.
TO
Tora
9 months ago
A Lambda function running every minute? Sounds like overkill!
LA
Lang
10 months ago
I think D is better because it specifically targets unrestricted routes.
DU
Dusti
10 months ago
I recall that using Lambda functions can be more complex, so I might lean towards the Config rules for simplicity, but I need to double-check the requirements.
PR
Providencia
10 months ago
I feel like option D could work too, but I’m a bit confused about the difference between the two Config rules mentioned in C and D.
YO
Yoko
10 months ago
Option C seems like the most efficient way to monitor changes.
YO
Youlanda
10 months ago
I think option C sounds familiar because it mentions using EventBridge and SNS, which we practiced in class. But I’m not sure if it’s the least effort.
LE
Leanna
11 months ago
I remember studying AWS Config rules, but I'm not entirely sure which managed rule would be the best fit for this scenario.
VO
Vonda
11 months ago
I disagree, B is simpler and directly tied to route changes.
LA
Lauran
11 months ago
Option D seems similar to option C, but it uses a different managed rule. I'll need to understand the differences between the "internet-gateway-authorized-vpc-only" and "no-unrestricted-route-to-igw" rules to decide which one is more appropriate for this scenario.
RE
Renato
11 months ago
Option C looks interesting as it uses AWS Config rules and EventBridge to monitor the route table, but I'm not sure if that would require more setup effort than the Lambda function in option A. I'll need to weigh the pros and cons of each approach.
LU
Luther
11 months ago
I'm a bit confused about the differences between options A and B. Both involve creating a Lambda function, but option B is triggered by the EC2 CreateRoute API call. I'll need to research the differences between these two approaches to determine the best solution.
GE
Gene
12 months ago
This seems like a straightforward question. I think option A is the best solution as it involves the least implementation effort by creating a Lambda function to monitor the route table and send email notifications.
DW
Dwight
12 months ago
Option A seems a bit overkill, as it requires setting up a Lambda function to continuously monitor the route table. The managed AWS Config rules in options C and D seem like a more efficient way to handle this requirement.
LO
Loreta
1 year ago
I'm leaning towards option B, as it allows us to directly intercept the CreateRoute API call and send the notification. That way, we can catch the issue as soon as it happens, rather than relying on a periodic check.
TR
Tracie
1 year ago
Option C looks promising, as it uses the managed AWS Config rule and EventBridge to handle the monitoring and notification requirements. That seems like a more out-of-the-box solution compared to building a custom Lambda function.
BR
Britt
1 year ago
I'm a bit confused by the different options. Do we need to create a custom Lambda function or can we use the managed AWS Config rules? I'm not sure which approach would require the least implementation effort.
JO
Josphine
1 year ago
This seems like a straightforward question. I think option D is the best solution as it directly addresses the requirement to monitor for default routes to the internet gateway and send email notifications.
GE
Genevive
2 years ago
That's a good point, Boris. Option C might provide more control and flexibility in the long run.
BO
Boris
2 years ago
I'm not sure, I think option C could also work well by using AWS Config rules and Amazon EventBridge to send email notifications.
BL
Blair
2 years ago
My money's on D. Gotta keep those default routes in check, you know?
HA
Hannah
1 year ago
Definitely, D will help ensure any unauthorized default routes are quickly identified and addressed.
IL
Ilda
1 year ago
I agree, setting up AWS Config rules and EventBridge for notifications is a solid choice.
WI
Wilda
1 year ago
Yeah, D seems like the most efficient solution for this scenario.
GA
Gail
1 year ago
I think D is the best option too. It's important to monitor those default routes.
AR
Arlean
2 years ago
Hmm, I'm torn between B and D. Maybe I'll just flip a coin. Or maybe I'll get the janitor to decide - he seems to have a knack for this kind of thing.
CA
Casie
2 years ago
I'm going to have to go with D on this one. The no-unrestricted-route-to-igw rule sounds like exactly what we need, and the EventBridge integration is just icing on the cake.
KA
Karina
2 years ago
I agree with Genevive. Option A seems like the most straightforward solution with the least implementation effort.
VI
Victor
2 years ago
C and D both look good, but I like the idea of using a managed rule in C. Less work for us, and it's probably more reliable than rolling our own.
WI
Winifred
2 years ago
Option B seems like the way to go. Tying the email notification directly to the API call is the most efficient approach. Who wants to wait a whole minute for that notification?
AS
Ashlyn
1 year ago
User 3: Option B it is then, direct tie to the API call for instant notification.
DE
Dean
2 years ago
User 2: Yeah, waiting a whole minute for the notification is too long.
DA
Dante
2 years ago
User 1: I agree, option B is definitely the most efficient.
GE
Genevive
2 years ago
I think option A is the best choice because it uses a Lambda function to send email notifications for any default route added to the route table.