Amazon Exam ANS-C01 Topic 3 Question 48 Discussion

Actual exam question for Amazon's ANS-C01 exam

Question #: 48
Topic #: 3

A banking company has an application that must connect to specific public IP addresses from a VPC. A network engineer has configured routes in the route table that is associated with the application's subnet to the required public IP addresses through an internet gateway.

The network engineer needs to set up email notifications that will alert the network engineer when a user adds a default route to the application subnet's route table with the internet gateway as a target.

Which solution will meet these requirements with the LEAST implementation effort?

ACreate an AWS Lambda function that reads the routes in the route table and sends an email notification. Configure the Lambda function to send an email notification if any route is configured with 0.0.0.0/0 or ::/0 CIDRs to the internet gateway. Configure the Lambda function to run every minute.

BCreate an AWS Lambda function that will be invoked by an Amazon EC2 CreateRoute API call. Configure the Lambda function to send an email notification. Configure the Lambda function to send an email notification if any route is configured with 0.0.0.0/0 or ::/0 CIDRs to the internet gateway.

CCreate AWS Config rules for the route table by using the internet-gateway-authorized-vpc-only managed rule. Create an Amazon EventBridge rule to match the AWS Config rule and to route to an Amazon Simple Notification Service (Amazon SNS) topic to send an email notification.

DCreate an AWS Config rule for the route table by using the no-unrestricted-route-to-igw managed rule. Create an Amazon EventBridge rule to match the AWS Config rule and to route to an Amazon Simple Notification Service (Amazon SNS) topic to send an email notification.

Show Suggested Answer

Suggested Answer: C

by Viki at Mar 22, 2025, 11:12 AM

Limited Time Offer

25%

Off

Get Premium ANS-C01 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Genevive

26 days ago

That's a good point, Boris. Option C might provide more control and flexibility in the long run.

upvoted 0 times

...

Boris

1 months ago

I'm not sure, I think option C could also work well by using AWS Config rules and Amazon EventBridge to send email notifications.

upvoted 0 times

...

1 months ago

Option B seems like the way to go. Tying the email notification directly to the API call is the most efficient approach. Who wants to wait a whole minute for that notification?

upvoted 0 times