An operational workload runs on Amazon EC2 instances in an Auto Scaling group. The VPC spans two Availability Zones (AZs), with one subnet in each AZ targeted by the Auto Scaling group. The VPC is connected to on-premises infrastructure and that connectivity must not be disrupted. The Auto Scaling group maximum is 20 instances. The current IPv4 addressing is: VPC 10.0.0.0/23, AZ1 subnet 10.0.0.0/24, AZ2 subnet 10.0.1.0/24. A third AZ is now available in the Region. You must add the new AZ for the Auto Scaling group without adding IPv4 address space and without service downtime. Which approach satisfies these constraints?
Choose an answer
Tap an option to check your answer.
Correct answer: Update the Auto Scaling group to target only the AZ2 subnet. Delete and recreate the AZ1 subnet using half of its previous address space. Update the Auto Scaling group to also target the recreated AZ1 subnet. When instances are healthy, switch the Auto Scaling group to target only the AZ1 subnet. Remove the current AZ2 subnet. Create a new AZ2 subnet using the second half of the address space that came from the original AZ1 subnet. Create a new AZ3 subnet using half of the original AZ2 subnet address space, then update the Auto Scaling group to target all three new subnets..
Why this is the answer
The correct approach ensures no downtime and no new IPv4 address space. By shifting traffic to AZ2, AZ1's subnet can be deleted and recreated with a smaller CIDR (10.0.0.0/25). The Auto Scaling group then targets this new AZ1 subnet. Once instances are healthy, traffic shifts to AZ1, allowing AZ2's subnet to be deleted. The remaining address space from the original AZ1 (10.0.0.128/25) is used for a new AZ2 subnet. Finally, the original AZ2's address space (10.0.1.0/24) is split, with 10.0.1.0/25 used for a new AZ3 subnet. This phased approach maintains connectivity and instance availability throughout the process. Incorrect options: Terminating instances in an AZ and recreating subnets simultaneously would cause downtime. Creating a new VPC would disrupt connectivity to on-premises infrastructure, violating a constraint. Updating a subnet to reduce its address space is not possible directly; subnets must be deleted and recreated to change their CIDR.
Pass your exam — without the endless answer hunt
Get every verified question and explanation for this exam in one place, and save hours of prep. 1,000+ certifications · 20+ languages · free to start.
Pass your exam faster → No card needed