A company is migrating a large monolithic application to AWS. The application uses a hardcoded IP address to connect to an on-premises legacy mainframe. The mainframe cannot be updated to use a new IP address. The company plans to migrate the mainframe to AWS in the future, but for now, the application running in AWS must be able to reach the mainframe using the exact same hardcoded IP address. How can the Architect achieve this?

Answer options:

Deploy the application in a VPC. Create a private NAT Gateway or use a proxy instance to translate the hardcoded IP to the actual on-premises IP over AWS Direct Connect.

Create a VPC with a CIDR block that includes the hardcoded IP address. Route traffic for that IP over AWS Direct Connect to the on-premises network.

Create a Route 53 private hosted zone and map the hardcoded IP address to an A record.

Ensure the hardcoded IP address is NOT part of the VPC CIDR block. Add a specific route in the VPC route table for the hardcoded IP address, pointing to the Virtual Private Gateway (VGW) attached to the Direct Connect.

How to approach this question

Understand VPC routing rules. Traffic destined for an IP outside the VPC CIDR can be routed to a VGW.

Full Answer

D.Ensure the hardcoded IP address is NOT part of the VPC CIDR block. Add a specific route in the VPC route table for the hardcoded IP address, pointing to the Virtual Private Gateway (VGW) attached to the Direct Connect.✓ Correct

Deploy the application in a VPC. Create a private NAT Gateway or use a proxy instance to translate the hardcoded IP to the actual on-premises IP over AWS Direct Connect.

If an application has a hardcoded IP address for an external dependency, you can route that traffic to your on-premises network via AWS Direct Connect or VPN. The critical requirement is that the hardcoded IP address must NOT be part of the VPC's CIDR block. If it is, the VPC router will treat it as local traffic and drop it if no instance has that IP. By keeping it outside the VPC CIDR, you can add a route table entry for that specific IP (e.g., a /32 route) pointing to the Virtual Private Gateway (VGW).

Common mistakes

Thinking DNS can intercept hardcoded IP addresses.

Question 56 All questions Question 58

Practice the full AWS Solutions Architect Professional SAP-C02 Practice Exam 5

75 questions · hints · full answers · grading

How to approach this question

Full Answer

Common mistakes

Practice the full AWS Solutions Architect Professional SAP-C02 Practice Exam 5

More questions from this exam