Q44 — AWS ANS-C01 Ch.1

Question 44 of 100 | ← Chapter 1

A company wants to improve visibility into its AWS environment. The AWS environment consists of multiple VPCs that are connected to a transit Gateway. The transit gateway connects to an on-premises data center through an AWS Direct Connect gateway and a pair of redundant Direct Connect connections that use transit VIFs. The company must receive notification each time a new route is advertised to AWS from on premises Over Direct Connect. What should a network engineer do to meet these requirements?

• A. Enable Amazon CloudWatch metrics on Direct Connect to track the received routes. Configure a CloudWatch alarm to send notifications When routes change.
• B. Onboard Transit Gateway Network Manager to Amazon CloudWatch Logs Insights. Use Amazon EventBridge (Amazon CloudWatch Events) To send notifications when routes change. ✓
• C. Configure an AWS Lambda function to periodically check the routes on the Direct Connect gateway and to send notifications when routes Change.
• D. Enable Amazon CloudWatch Logs on the transit VIFs to track the received routes. Create a metric filter Set an alarm on the filter to send Notifications when routes change.

Correct Answer: B. Onboard Transit Gateway Network Manager to Amazon CloudWatch Logs Insights. Use Amazon EventBridge (Amazon CloudWatch Events) To send notifications when routes change.

Explanation

AWS环境中，Transit Gateway Network Manager提供了网络拓扑可视化和路由监控能力。结合Amazon CloudWatch Logs Insights，可分析网络管理器生成的日志数据，识别路由表变更事件。Amazon EventBridge通过定义事件规则，匹配特定日志模式（如路由更新），触发通知机制。其他选项中，Direct Connect的CloudWatch Metrics（A）不直接追踪路由表变化；Lambda轮询（C）效率较低；Transit VIF的日志（D）不涵盖路由广告事件。AWS官方文档指出，Network Manager与CloudWatch Logs、EventBridge集成能有效监控并响应网络配置变更。