
Ultimate access to all questions.
An education agency is organizing its annual nationwide school competition, where students solve math problems, puzzles, and write essays. The competition is hosted in a private AWS Cloud environment, with centralized IP addressing for all schools. All traffic must be encrypted in transit, and access is restricted to authorized endpoints. Schools have firewalls that block ICMP traffic. A network engineer sets up AWS Site-to-Site VPN connections for school access, using BGP for routing. The engineer must implement a solution to notify schools when connectivity is lost, prompting them to address the issue locally.
Which two steps should the network engineer take to meet these requirements MOST cost-effectively?
A
Monitor the state of the VPN tunnels by using Amazon CloudWatch. Create a CloudWatch alarm that uses Amazon Simple Notification Service (Amazon SNS) to notify people at the affected school if the tunnels are down.
B
Create a scheduled AWS Lambda function that pings each school's on-premises customer gateway device. Configure the Lambda function to send an Amazon Simple Notification Service (Amazon SNS) notification to people at the affected school if the ping fails.
C
Create a scheduled AWS Lambda function that uses the VPC Reachability Analyzer API to verify the connectivity. Configure the Lambda function to send an Amazon Simple Notification Service (Amazon SNS) notification to people at the affected school if failure occurs.
D
Create an Amazon CloudWatch dashboard for each school to show all CloudWatch metrics for each school's Site-to-Site VPN connection. Share each dashboard with the appropriate school.
E
Create a scheduled AWS Lambda function to monitor the existence of each school's routes in the VPC route table where VPN routes are propagated. Configure the Lambda function to send an Amazon Simple Notification Service (Amazon SNS) notification to people at the affected school if failure occurs.