For IndividualsFor Educators
ExpertMinds LogoExpertMinds
ExpertMinds

Ace your certifications with Practice Exams and AI assistance.

  • Browse Exams
  • For Educators
  • Blog
  • Privacy Policy
  • Terms of Service
  • Cookie Policy
  • Support
  • AWS SAA Exam Prep
  • PMI PMP Exam Prep
  • CPA Exam Prep
  • GCP PCA Exam Prep

© 2026 TinyHive Labs. Company number 16262776.

    PracticeAWS Solutions Architect Professional (SAP-C02)AWS Solutions Architect Professional SAP-C02 Practice Exam 4Question 01
    Hard1 markMultiple Choice
    Domain 1.1: Network ConnectivityDirect ConnectTransit GatewayNetworking

    AWS SAP-C02 · Question 01 · Domain 1.1: Network Connectivity

    A global enterprise is redesigning its network architecture across 50 AWS accounts. They require transitive routing between all VPCs and three on-premises data centers. The solution must support up to 10 Gbps of encrypted traffic per data center, minimize operational overhead, and ensure that traffic between VPCs in the same region does not traverse the internet. Which architecture meets these requirements MOST cost-effectively?

    Answer options:

    A.

    Provision AWS Direct Connect. Use AWS Transit Gateway with VPN attachments for encryption. Peer Transit Gateways across regions.

    B.

    Provision AWS Direct Connect with MACsec. Create a Direct Connect Gateway attached to a Transit Gateway in each region. Attach VPCs to the local TGW.

    C.

    Use AWS VPN CloudHub with multiple Site-to-Site VPNs. Connect to a Transit Gateway in a central region.

    D.

    Provision Direct Connect. Use VPC peering between all VPCs and attach the DX connection to a central transit VPC.

    How to approach this question

    Identify the need for 10 Gbps encryption (MACsec) and transitive routing (Transit Gateway).

    Full Answer

    B.Provision AWS Direct Connect with MACsec. Create a Direct Connect Gateway attached to a Transit Gateway in each region. Attach VPCs to the local TGW.✓ Correct
    Direct Connect with MACsec provides line-rate encryption. DX Gateway combined with Transit Gateway allows scalable, transitive routing across multiple accounts.

    Common mistakes

    Choosing VPN over DX, which limits bandwidth.
    All questionsQuestion 02

    Practice the full AWS Solutions Architect Professional SAP-C02 Practice Exam 4

    75 questions · hints · full answers · grading

    Sign up freeTake the exam

    More questions from this exam

    Q02A financial services company uses AWS Organizations to manage 100+ accounts. The security team ma...MediumQ03An e-commerce company requires a multi-region active-active architecture for its critical order p...MediumQ04A company is setting up a new AWS environment using AWS Control Tower. They need to ensure that a...HardQ05An enterprise has 50 AWS accounts under AWS Organizations. They want to implement a chargeback mo...MediumQ06A company is designing a hybrid network architecture. They have two on-premises data centers and ...Hard
    View all 75 questions →