ANS-C01 · Question #259
A company has a VPC that includes application workloads that run on Amazon EC2 instances in a single AWS Region. The company wants to use AWS Local Zones to deploy an extension of the application…
The correct answer is D. Create a new subnet in the Local Zone. Configure the new subnet to use a CIDR block that is. To extend application workloads to an AWS Local Zone and enable cost-effective bidirectional communication with the main VPC, create a new subnet in the Local Zone using a CIDR block from the existing VPC.
Question
A company has a VPC that includes application workloads that run on Amazon EC2 instances in a single AWS Region. The company wants to use AWS Local Zones to deploy an extension of the application workloads that run in the Region. The extended workloads in the Local Zone need to communicate bidirectionally with the workloads in the VPC in the Region. Which solution will meet these requirements MOST cost-effectively?
Options
- ACreate a new VPC in the Local Zone. Attach all the VPCs to a transit gateway. Configure routing
- BDeploy a third-party appliance in a new VPC in the Region. Create a new VPC in the Local Zone.
- CCreate a new subnet in the Local Zone. Deploy a third-party appliance in the VPC with interfaces
- DCreate a new subnet in the Local Zone. Configure the new subnet to use a CIDR block that is
How the community answered
(35 responses)- A3% (1)
- C3% (1)
- D94% (33)
Why each option
To extend application workloads to an AWS Local Zone and enable cost-effective bidirectional communication with the main VPC, create a new subnet in the Local Zone using a CIDR block from the existing VPC.
Creating a new VPC in the Local Zone and using a Transit Gateway would add unnecessary complexity and cost for communication between a Local Zone and its parent Region's VPC, as Local Zones are designed to be a direct extension of a VPC.
Deploying third-party appliances and creating entirely new VPCs in both the Region and Local Zone for communication is a highly complex and expensive solution, far from being the most cost-effective.
While creating a new subnet in the Local Zone is correct, deploying a third-party appliance in the VPC with interfaces in both the Local Zone and parent Region is an overly complex and costly approach for simple intra-VPC communication.
Creating a new subnet within the existing VPC and assigning it to the Local Zone allows resources deployed there to use private IP addresses from the VPC's CIDR block. This enables seamless and cost-effective bidirectional communication with other workloads in the same VPC in the parent region without requiring complex networking constructs.
Concept tested: AWS Local Zones Integration with VPC
Source: https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/using-local-zones.html
Community Discussion
No community discussion yet for this question.