AWS Certified Advanced Networking - Specialty

AWS Certified Advanced Networking - Specialty

Get started today

Ultimate access to all questions.


A financial company operates multiple applications on Amazon EC2 instances across two VPCs within a single AWS Region. One VPC is dedicated to stock trading applications, while the other is used for financial applications. Both VPCs are connected to a transit gateway configured as a multicast router.

In the stock trading VPC, an EC2 instance with the IP address 10.128.10.2 transmits trading data over a multicast network to the IP address 239.10.10.10 on UDP Port 5102. The company has recently deployed two new EC2 instances in the financial application VPC, which need to receive the multicast stock trading data from the EC2 instance in the stock trading VPC.

What combination of steps should the company implement to fulfill this requirement? (Choose three.)





Explanation:

To enable the new EC2 instances in the financial application VPC to receive multicast stock trading data from the EC2 instance in the stock trading VPC, the following steps are necessary:

  1. Add the elastic network interfaces of the two new EC2 instances as members of the multicast group by using the group IP address of 239.10.10.10 (Option A). This step ensures that the new instances are recognized as part of the multicast group and can receive data sent to the multicast IP address.

  2. Create associations to two EC2 instance IDs on the financial application VPC transit gateway attachment under the transit gateway multicast domain (Option C). This step is crucial for configuring the transit gateway to route multicast traffic to the correct instances in the financial application VPC.

  3. Add an inbound rule to the security groups that are attached to the multicast receiver instances. Configure the rule as follows: Protocol: UDP, Port: 5102, and Source: 10.128.10.2/32 (Option E). This security group rule allows the multicast traffic from the specific source IP address (the EC2 instance in the stock trading VPC) on the required UDP port to reach the new EC2 instances in the financial application VPC.

Options B and D are incorrect because they either misconfigure the protocol (IGMP instead of UDP) or the source address, which would not allow the multicast traffic to be properly received by the new EC2 instances.