ANS-C01 practice question 2 of 35

A company wants to improve visibility into its AWS environment. The AWS environment consists of multiple VPCs that are connected to a transit…

A company wants to improve visibility into its AWS environment. The AWS environment consists of multiple VPCs that are connected to a transit gateway. The transit gateway connects to an on- premises data center through an AWS Direct Connect gateway and a pair of redundant Direct Connect connections that use transit VIFs. The company must receive notification each time a new route is advertised to AWS from on premises over Direct Connect. What should a network engineer do to meet these requirements?

Answer options

A: Enable Amazon CloudWatch metrics on Direct Connect to track the received routes. Configure a CloudWatch alarm to send notifications when routes change.

B: Onboard Transit Gateway Network Manager to Amazon CloudWatch Logs Insights. Use Amazon EventBridge (Amazon CloudWatch Events) to send notifications when routes change. Correct answer

C: Configure an AWS Lambda function to periodically check the routes on the Direct Connect gateway and to send notifications when routes change.

D: Enable Amazon CloudWatch Logs on the transit VIFs to track the received routes. Create a metric filter Set an alarm on the filter to send notifications when routes change.

Correct Answer:

B. Onboard Transit Gateway Network Manager to Amazon CloudWatch Logs Insights. Use Amazon EventBridge (Amazon CloudWatch Events) to send notifications when routes change.

Explanation

The requirement is to receive notifications for BGP route advertisements from on-premises over Direct Connect to a Transit Gateway. AWS Transit Gateway Network Manager is a service designed for centralized network monitoring and management. It provides a global view of the network, including route analysis. By integrating Network Manager with Amazon EventBridge, you can create rules that trigger on specific network events, such as route changes (AWS API Call via CloudTrail event for AcceptTransitGatewayPeeringAttachment). When a new route is advertised and accepted, an event is generated, which can then trigger a notification via Amazon SNS or another target. This provides a managed, event-driven solution.

Why Incorrect

A. CloudWatch metrics for Direct Connect track the number of routes, not the specific route details. An alarm would trigger on a count change but wouldn't identify the new route.
C. Using a Lambda function is a custom, imperative solution that requires writing, managing, and scheduling code to poll for changes, which has higher operational overhead than a managed, event-driven approach.
D. BGP route advertisements are not logged to Amazon CloudWatch Logs via transit VIFs. This describes a feature that does not exist for this purpose.

References

1. AWS Documentation, "Monitoring your transit gateway network with Amazon CloudWatch," AWS Transit Gateway Network Manager Guide. (This document explains how Network Manager integrates with CloudWatch and EventBridge for monitoring).

2. AWS Documentation, "Route Analyzer," AWS Transit Gateway Network Manager Guide. (This section describes the Route Analyzer feature, which provides visibility into the routing path, including BGP-advertised routes).

3. AWS Documentation, "Automating network monitoring and analysis with Transit Gateway Network Manager," AWS Networking & Content Delivery Blog, Nov 24, 2020. (This blog post provides examples of using EventBridge to react to network events from Network Manager).

Keep practicing

Take the free ANS-C01 practice test

Ten exam-style questions with answers and explanations, plus the exam facts and study guides.

Start the free practice test