ANS-C01 Network Security, Compliance and Governance Practice Question

Order the steps to troubleshoot an inter-Region VPC peering connection that is not working:

Drag steps to the numbered slots on the right, or tap a step then tap a slot.

Steps

Order

1Step 1

2Step 2

3Step 3

4Step 4

5Step 5

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

✓

Verify peering status, then check route tables, then check security groups and NACLs, then test connectivity, then use VPC Flow Logs

First verify peering status, then check routes, then security groups/ACLs, then test, then use flow logs.

Answer analysis

For each option: why learners choose it and why it is or isn't the right answer here.

✓
Verify peering status, then check route tables, then check security groups and NACLs, then test connectivity, then use VPC Flow Logs
Why this is correct
This is correct because you should first confirm the peering connection is active, then ensure routes point to the peered VPC, then verify security groups and NACLs allow traffic, test connectivity, and finally use flow logs if issues persist.
✗
Test connectivity, then check security groups and NACLs, then check route tables, then use VPC Flow Logs, then verify peering status
Why it's wrong here
This is incorrect because testing before verifying the peering status and routes can waste time. Flow logs are a last resort, not a first step.
✗
Check security groups and NACLs, then check route tables, then verify peering status, then test connectivity, then use VPC Flow Logs
Why it's wrong here
This is incorrect because you should verify the peering connection is active before checking security groups, as an inactive peering will block all traffic regardless of rules.
✗
Use VPC Flow Logs, then verify peering status, then check route tables, then check security groups and NACLs, then test connectivity
Why it's wrong here
This is incorrect because flow logs are meant for analysis after simpler checks fail. Starting with flow logs is inefficient and may not address the root cause.

Go deeper