Hard1 markMultiple Choice
AWS SAA-C03 · Question 48 · Domain 3.4: Network Performance
A company has 50 VPCs across multiple AWS accounts. They need to establish network connectivity between all VPCs and their on-premises data center via a single AWS Direct Connect connection. What is the MOST scalable and high-performing architecture?
A company has 50 VPCs across multiple AWS accounts. They need to establish network connectivity between all VPCs and their on-premises data center via a single AWS Direct Connect connection. What is the MOST scalable and high-performing architecture?
Answer options:
A.
Create VPC peering connections between all 50 VPCs.
B.
Use AWS Transit Gateway to connect the VPCs and the Direct Connect connection.
C.
Deploy a software VPN appliance on an EC2 instance in a central VPC.
D.
Connect each VPC directly to the Direct Connect connection using Private VIFs.
How to approach this question
Look for 'many VPCs' and 'scalable connectivity'. Transit Gateway is the hub-and-spoke solution.
Full Answer
B.Use AWS Transit Gateway to connect the VPCs and the Direct Connect connection.✓ Correct
Use AWS Transit Gateway to connect the VPCs and the Direct Connect connection.
AWS Transit Gateway connects VPCs and on-premises networks through a central hub. This simplifies your network and puts an end to complex peering relationships. It acts as a highly scalable cloud router.
Common mistakes
Choosing VPC Peering, which becomes unmanageable at scale due to the lack of transitive routing.
Practice the full AWS SAA-C03 Practice Exam 3
65 questions · hints · full answers · grading
More questions from this exam
Q01A company stores sensitive documents in an Amazon S3 bucket. The security team requires that only...EasyQ02A large enterprise uses AWS Organizations to manage multiple accounts. The security team wants to...MediumQ03A company hosts a web application on Amazon EC2 instances behind an Application Load Balancer (AL...EasyQ04A company wants to continuously monitor its AWS accounts for malicious activity and unauthorized ...MediumQ05A company needs to encrypt data at rest in Amazon RDS and manage database credentials securely. T...Medium
Expert