Examkin

Question

Difficulty: MediumInfrastructure Migration with AWS Application Migration Service (MGN)

A financial technology company is migrating its core ledger database and transaction processing servers from an on-premises VMware environment to AWS using AWS Application Migration Service (MGN). The migration must occur over a private network path using an existing AWS Direct Connect connection. The staging area subnet in the target VPC has no path to the public internet. Which two configurations must the Solutions Architect implement to establish replication? (Select TWO).

  1. Configure the AWS Application Migration Service replication template to use private IP routing for data replication over the Direct Connect connection.Answer
  2. Configure the staging area security group to allow inbound traffic on TCP Port 1500 from the subnet hosting the on-premises source servers.Answer
  3. C
    Configure the staging area security group to only allow inbound traffic on TCP Port 443 from the on-premises servers, routing all replication traffic over secure HTTPS.
  4. D
    Configure the Transit Gateway route table to route replication traffic directly to the Direct Connect Gateway without associating it with a Transit Gateway attachment, enabling transitive routing.
  5. E
    Deploy a Route 53 Private Hosted Zone for the AWS Application Migration Service endpoint in the staging VPC without associating it with the other VPCs in the environment.

Answer

The Solutions Architect must configure the AWS Application Migration Service replication template to use private IP routing for data replication, and configure the staging area security group to allow inbound traffic on TCP Port 1500 from the subnet hosting the on-premises source servers.
To replicate data privately over Direct Connect, the replication template must be configured to use private IP routing, and the staging area security group must allow inbound traffic on TCP Port 1500 from the source subnet. These settings enable private, block-level data replication from the on-premises servers to the replication instances.

Step-by-Step Solution

1
Configure the MGN replication template for private IP routing.
The Replication Agent will attempt to establish connections to the private IPs of the replication servers in the staging VPC rather than public IPs.
This satisfies the requirement to route replication traffic privately over the Direct Connect connection without internet exposure.
2
Configure the security group for the replication servers in the staging subnet.
The security group allows inbound traffic on TCP Port 1500 from the on-premises subnet.
AWS Application Migration Service requires TCP Port 1500 to transfer replication data blocks from the source agent to the replication servers.

Key Concept

AWS Application Migration Service (MGN) private replication requires configuring the replication template to use private IP routing and ensuring TCP Port 1500 is open from the source environment to the staging area.
Estimated Time:2m 0s
Rate this question

Topics

Infrastructure Migration with AWS Application Migration Service (MGN)

More questions from this topic