ExpertAWS SAP-C02 · Question 01 · Domain 1.1: Network Connectivity
A global enterprise is redesigning its network architecture across 50 AWS accounts. They require transitive routing between all VPCs and three on-premises data centers. The solution must support up to 10 Gbps of encrypted traffic per data center, minimize operational overhead, and ensure that traffic between VPCs in the same region does not traverse the internet. Which architecture meets these requirements MOST cost-effectively?
A global enterprise is redesigning its network architecture across 50 AWS accounts. They require transitive routing between all VPCs and three on-premises data centers. The solution must support up to 10 Gbps of encrypted traffic per data center, minimize operational overhead, and ensure that traffic between VPCs in the same region does not traverse the internet. Which architecture meets these requirements MOST cost-effectively?
Answer options:
Provision AWS Direct Connect. Use AWS Transit Gateway with VPN attachments for encryption. Peer Transit Gateways across regions.
Provision AWS Direct Connect with MACsec. Create a Direct Connect Gateway attached to a Transit Gateway in each region. Attach VPCs to the local TGW.
Use AWS VPN CloudHub with multiple Site-to-Site VPNs. Connect to a Transit Gateway in a central region.
Provision Direct Connect. Use VPC peering between all VPCs and attach the DX connection to a central transit VPC.
How to approach this question
Full Answer
Common mistakes
Practice the full AWS Solutions Architect Professional SAP-C02 Practice Exam 4
75 questions · hints · full answers · grading