Examkin

Question

Difficulty: MediumMigration Discovery, Planning, and Tracking (Application Discovery Service, Migration Hub)

A company is planning to migrate its on-premises application environment to AWS and wants to track the overall migration progress in AWS Migration Hub. The environment consists of 120 VMware vSphere virtual machines running supported versions of Windows Server and Red Hat Enterprise Linux, along with 10 physical bare-metal servers running IBM AIX 7.2. The company's corporate security policy strictly prohibits direct outbound internet access from these servers, but a site-to-site VPN connection to an AWS VPC is available. The Solutions Architect must collect system configurations, gather performance utilization history, map network dependencies to identify application boundaries, and minimize manual effort. Which combination of actions should the Solutions Architect take to accomplish these goals?

  1. Install the AWS Application Discovery Agent on the VMware virtual machines, configured to send data through an on-premises proxy to the AWS Application Discovery Service VPC endpoint. Manually gather configuration and dependency details for the AIX bare-metal servers, and import them into AWS Migration Hub using the CSV import template.Answer
  2. B
    Deploy the AWS Application Discovery Agentless Collector on VMware vSphere to discover both the VMware virtual machines and the AIX bare-metal servers. Configure the collector to output discovery logs to a local Amazon S3 File Gateway to bypass the outbound internet restriction.
  3. C
    Install the AWS Application Migration Service (MGN) replication agent on all VMware virtual machines and AIX bare-metal servers to automatically discover OS configurations and track live network replication dependencies directly within the AWS Migration Hub dashboard.
  4. D
    Request an AWS Snowball Edge Storage Optimized device, deploy the Application Discovery Agentless Collector on the device's compute capacity, and connect it to the on-premises network to perform local scanning of the VMware virtual machines and AIX physical servers without using the VPN.

Answer

Install the AWS Application Discovery Agent on the VMware virtual machines, configured to send data through an on-premises proxy to the AWS Application Discovery Service VPC endpoint. Manually gather configuration and dependency details for the AIX bare-metal servers, and import them into AWS Migration Hub using the CSV import template.
The correct choice involves installing the AWS Application Discovery Agent on the VMware VMs, routing their traffic to a VPC endpoint via an on-premises proxy, and manually importing the AIX bare-metal server data. The discovery agent supports the Windows and Red Hat Enterprise Linux VMs and can gather the network connection data needed for dependency mapping. For security, routing the agent traffic via a proxy to the VPC endpoint satisfies the constraint of having no direct outbound internet access. Since IBM AIX is not supported by the discovery agents, their information must be manually collected and imported via the Migration Hub CSV template.

Step-by-Step Solution

1
Identify the OS compatibility of AWS Application Discovery Service collection mechanisms.
The Application Discovery Agent supports Windows and standard Linux distributions but does not support IBM AIX. The Agentless Collector cannot perform discovery on physical bare-metal servers.
This rules out automatic agent-based collection for the AIX servers and indicates they must be manually documented and imported using the Migration Hub CSV import template.
2
Determine the data collection requirements for dependency mapping.
Process-level network dependency mapping requires the Application Discovery Agent (agent-based), while the Agentless Collector only gathers VM-level inventory and performance.
The agent-based approach is required for the VMware virtual machines to map network dependencies.
3
Address the security requirement of no direct outbound internet access.
Route the agent traffic through an on-premises proxy to the AWS Application Discovery Service VPC endpoints (AWS PrivateLink) over the site-to-site VPN connection.
This allows secure data transmission to AWS without allowing direct outbound internet access from the on-premises servers.

Key Concept

Determining appropriate AWS Application Discovery Service collection methods based on operating system support, virtualization type, network dependency mapping requirements, and security configurations.
Estimated Time:2m 0s
Rate this question

Topics

Migration Discovery, Planning, and Tracking (Application Discovery Service, Migration Hub)

More questions from this topic