Câu 13: 300-440: Designing and Implementing Cloud Connectivity (ENCC)

Refer to the exhibit. An engineer successfully brings up the site-to-site VPN tunnel between the remote office and the AWS virtual private gateway, and the site-to-site routing works correctly. However, the end-to-end ping between the office user PC and the AWS EC2 instance is not working. Which two actions diagnose the loss of connectivity? (Choose two.)

1. A. Check the network security group rules on the host VNET.
2. B. Check the security group rules for the host VPC. — đáp án hiện tại
3. C. Check the IPsec SA counters. — đáp án hiện tại
4. D. On the Cisco VPN router, configure the IPsec SA to allow ping packets.
5. E. On the AWS private virtual gateway, configure the IPsec SA to allow ping packets.