Domain 1.1: Network Connectivity — AWS SAP-C02 Practice Question 62

How to approach this question

Identify the hub-and-spoke router (TGW), the appliance load balancer (GWLB), and the central location (Egress VPC).

Full Answer

AWS Transit Gateway Gateway Load Balancer (GWLB) A dedicated Egress/Security VPC

Centralized egress requires an Egress VPC. AWS Transit Gateway routes traffic from all member VPCs to this Egress VPC. Within the Egress VPC, a Gateway Load Balancer (GWLB) distributes the traffic to a fleet of third-party firewall appliances for inspection before it goes to the internet.

Common mistakes

Choosing VPC Peering instead of Transit Gateway for a scalable multi-account architecture.

An enterprise is designing a multi-account strategy using AWS Control Tower. They need to implement centralized egress to the internet for all member accounts to inspect traffic using a third-party firewall appliance. Which THREE architectural components are required? (Select THREE)

How to approach this question

Full Answer

Common mistakes

Practice the full AWS Solutions Architect Professional SAP-C02 Practice Exam 1

More questions from this exam