A company has a VPC with a CIDR block of 10.0.0.0/16. They need to connect this VPC to an on-premises network (192.168.1.0/24) and to a partner's VPC (10.1.0.0/16). The architecture must be highly available and support future connections to dozens of other VPCs. <br/><br/>Which TWO services should be used to build this network topology? (Select TWO.)

Answer options:

VPC Peering

AWS Transit Gateway

AWS Site-to-Site VPN

AWS Direct Connect

AWS PrivateLink

How to approach this question

Identify the service that acts as a hub-and-spoke router for many VPCs.

Full Answer

AWS Transit Gateway<br/>AWS Site-to-Site VPN

AWS Transit Gateway connects VPCs and on-premises networks through a central hub. This simplifies your network and puts an end to complex peering relationships. You can attach an AWS Site-to-Site VPN to the Transit Gateway to connect the on-premises network.

Common mistakes

Selecting VPC Peering, which becomes unmanageable with dozens of VPCs.

Question 39 All questions Question 41

Practice the full AWS SAA-C03 Practice Exam 4

65 questions · hints · full answers · grading

More questions from this exam

Q01A company has multiple AWS accounts in an AWS Organizations organization. The security team wants...Medium Q02An application running on Amazon EC2 instances needs to access an Amazon DynamoDB table. Both res...Easy Q03A company is designing a web application that will be hosted on AWS. The application will use an ...Medium Q04A company is building a mobile app that requires users to authenticate using their social media a...Hard Q05A solutions architect is designing a VPC for a three-tier web application. The database tier must...Medium

View all 65 questions →