Examkin

Question

Difficulty: MediumInfrastructure Migration with AWS Application Migration Service (MGN)

An energy utility company is migrating its legacy grid monitoring application, consisting of 5 on-premises servers, to AWS using AWS Application Migration Service (MGN). The on-premises network is connected to AWS using an AWS Direct Connect connection terminated at a Direct Connect Gateway, which is associated with an AWS Transit Gateway. The Transit Gateway routes traffic to a dedicated Migration Staging VPC where the replication servers are located. After installing the AWS Replication Agent on the source servers, the replication status on the AWS MGN console is displayed as 'Stalled'. Which of the following actions should the Solutions Architect take to resolve the replication issue?

  1. Ensure that the on-premises firewall and the Migration Staging VPC security groups permit outbound and inbound traffic on TCP port 1500, respectively, to allow replication data transfer from the AWS Replication Agent to the replication servers.Answer
  2. B
    Modify the Migration Staging VPC security group to allow inbound traffic only on TCP port 443 from the on-premises servers, since replication data is tunneled through the secure AWS MGN service endpoints.
  3. C
    Configure a Direct Connect gateway association that allows transitive routing directly between the on-premises network and the staging subnets, bypassing the Transit Gateway route tables.
  4. D
    Create an Amazon Route 53 Private Hosted Zone for the replication server hostnames and associate it with all active VPCs in the AWS Organization to resolve name resolution failures.

Answer

Ensure that the on-premises firewall and the Migration Staging VPC security groups permit outbound and inbound traffic on TCP port 1500, respectively, to allow replication data transfer from the AWS Replication Agent to the replication servers.
The correct answer is to ensure that the on-premises firewall and the Migration Staging VPC security groups permit traffic on TCP port 1500. This is because AWS Application Migration Service replication servers listen on TCP port 1500 to receive replicated data blocks from the AWS Replication Agent installed on the source servers. Without this port open, replication cannot succeed and will be marked as stalled.

Step-by-Step Solution

1
Identify the networking requirements for AWS Application Migration Service (MGN) data replication.
Data replication from the source servers to the replication servers in the Migration Staging VPC requires TCP port 1500.
AWS Application Migration Service uses TCP port 1500 for the secure transfer of replicated data blocks.
2
Analyze the firewall and security group rules along the traffic path.
Traffic must pass through the on-premises firewall (outbound) and the staging VPC security groups (inbound).
Stalled replication indicates that the replication data stream is blocked along the path.
3
Formulate the correct firewall and security group adjustments.
Enable TCP port 1500 outbound on-premises and inbound on the Migration Staging VPC security groups.
Opening TCP port 1500 ensures that replication data blocks can be successfully transmitted to the replication servers.

Key Concept

AWS Application Migration Service (MGN) network replication port requirements
Rate this question

Topics

Infrastructure Migration with AWS Application Migration Service (MGN)

More questions from this topic