Examkin

Question

Difficulty: MediumMigration Discovery, Planning, and Tracking (Application Discovery Service, Migration Hub)

A biotechnology firm is planning to migrate its drug discovery platform to AWS. The on-premises environment consists of 50 VMware vSphere virtual machines (VMs) and 10 physical bare-metal database servers. The firm's strict security compliance policy prohibits installing any third-party software or agents on the production VMware guest operating systems. However, they must perform network connection dependency mapping on the bare-metal database servers to identify active TCP connections and group them with the correct front-end applications. All servers are restricted from direct outbound internet access, but a central proxy server is available for outbound HTTPS traffic. Which combination of actions should a solutions architect recommend to collect the necessary discovery data and track the migration? (Select TWO.)

  1. Deploy the AWS Application Discovery Agentless Collector as an OVA in the VMware vCenter environment to gather VM configuration and utilization metrics without guest OS agent installation.Answer
  2. Install the AWS Application Discovery Agent on the 10 physical bare-metal database servers and configure the agent configuration file to route HTTPS traffic through the central proxy server.Answer
  3. C
    Install the AWS Application Discovery Agent on the VMware VMs, and configure the local firewall to permit traffic on TCP port 1500 to the migration staging area to discover the server dependencies.
  4. D
    Deploy the AWS Application Discovery Agentless Collector on a dedicated physical utility server to perform active network connection mapping and process discovery on the bare-metal database hosts.
  5. E
    Use AWS Schema Conversion Tool (SCT) to extract database schemas and manually upload the database metadata as a CSV file to AWS Migration Hub to dynamically map real-time network dependencies.

Answer

Deploy the AWS Application Discovery Agentless Collector as an OVA in the VMware vCenter environment, and install the AWS Application Discovery Agent on the 10 physical bare-metal database servers, configuring the agents to route traffic through the central proxy.
To discover the VMware VMs without violating the security policy that prohibits guest OS agent installation, the solutions architect should deploy the Agentless Collector as an OVA in VMware vCenter. To map the network dependencies and process information on the physical bare-metal servers, the Application Discovery Agent must be installed directly on those hosts. Because outbound internet connectivity is restricted, the agents must be configured to route discovery data through the centralized HTTPS proxy server.

Step-by-Step Solution

1
Analyze the discovery requirements for the VMware vSphere VMs.
Since the security compliance policy prohibits installing guest-level agents, an agentless discovery mechanism is required. The AWS Application Discovery Agentless Collector is deployed as an OVA inside VMware vCenter to discover VMs agentlessly.
Ensures compliance with security policies while still gathering necessary system configurations and utilization data.
2
Analyze the discovery requirements for the physical bare-metal database servers.
The bare-metal servers require network connection dependency mapping. This depth of discovery is only supported by the host-based AWS Application Discovery Agent, which must be installed on the operating systems.
Agentless mechanisms cannot query OS-level network connections or processes, making the agent necessary for database servers.
3
Configure network access for the installed agents.
Configure the agent config file on the physical servers to forward outbound HTTPS traffic (port 443) through the designated central proxy server.
Allows the discovery agent to send collected data to AWS endpoints in a restricted network environment.

Key Concept

Hybrid environment discovery using AWS Application Discovery Service agent-based and agentless collection mechanisms while adhering to security and proxy constraints.
Estimated Time:2m 0s
Rate this question

Topics

Migration Discovery, Planning, and Tracking (Application Discovery Service, Migration Hub)

More questions from this topic