ExamGecko
Question list
Search
Search

List of questions

Search

Related questions











Question 34 - DOP-C01 discussion

Report
Export

You are building a deployment system on AWS. You will deploy new code by bootstrapping instances in a private subnet in a VPC at runtime using UserData scripts pointing to an S3 zip file object, where your code is stored. An ELB in a public subnet has network interfaces and connectivity to the instances. Requests from users of the system are routed to the ELB via a Route53 A Record Alias. You do not use any VPC endpoints. Which is a risk of using this approach?

A.
Route53 Alias records do not always update dynamically with ELB network changes after deploys.
Answers
A.
Route53 Alias records do not always update dynamically with ELB network changes after deploys.
B.
If the NAT routing for the private subnet fails, deployments fail.
Answers
B.
If the NAT routing for the private subnet fails, deployments fail.
C.
Kernel changes to the base AMI may render the code inoperable.
Answers
C.
Kernel changes to the base AMI may render the code inoperable.
D.
The instances cannot be in a private subnet if the ELB is in a public one.
Answers
D.
The instances cannot be in a private subnet if the ELB is in a public one.
Suggested answer: B

Explanation:

Since you are not using VPC endpoints, outbound requests for the code sitting in S3 are routed though the NAT for the VPC's private subnets. If this networking fails, runtime bootstrapping through code download will fail due to network unavailability and lack of access to the Internet, and thus Amazon S3.

Reference: http://docs.aws.amazon.com/AmazonVPC/latest/UserGuide/VPC_NAT_Instance.html

asked 16/09/2024
Michael Thornton
43 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first