ANS-C01 · Question #276
A company has five VPCs in the us-east-1 Region. The company hosts an internal web application in us-east-1. One of the company's VPCs. named VPC-A, needs to connect to an external partner's AWS…
The correct answer is B. Ensure the partner creates a VPC endpoint service that uses a Network Load Balancer in VPC-B. C. Deploy a VPC endpoint in VPC-A that uses a VPC endpoint service that is shared by the partner. The partner can create a VPC endpoint service backed by an NLB in VPC-B. The NLB routes traffic to the web application in VPC-B, allowing external access to the application without requiring direct VPC-to-VPC connectivity. This approach ensures isolation and avoids conflicts…
Question
A company has five VPCs in the us-east-1 Region. The company hosts an internal web application in us-east-1. One of the company's VPCs. named VPC-A, needs to connect to an external partner's AWS environment. The partner's environment is in the same AWS Region where the partner hosts a new version of the company's web application. The partner hosts its version of the application in a VPC named VPC-B. The company has Amazon EC2 instances in VPC-A that need to connect to the web application in VPC-B A network engineer notices that the partner's VPC-B and the company's VPC-A use the same IP space. The network engineer needs a solution to allow the EC2 instances to connect to the web application. The solution must not negatively affect the exiting environment of the company or the partner. Which combination of steps should the network engineer take meet these requirements? (Choose two.)
Options
- AEstablish a VPC peering connection between VPC-A to VPC-B.
- BEnsure the partner creates a VPC endpoint service that uses a Network Load Balancer in VPC-B.
- CDeploy a VPC endpoint in VPC-A that uses a VPC endpoint service that is shared by the partner.
- DDeploy a new routable VPC CIDR block as a secondary CIDR block to both VPC-A and VPC-B.
- EEstablish an AWS Site-to-Site VPN connection between VPC-A and VPC-B.
How the community answered
(23 responses)- A13% (3)
- B48% (11)
- D35% (8)
- E4% (1)
Explanation
The partner can create a VPC endpoint service backed by an NLB in VPC-B. The NLB routes traffic to the web application in VPC-B, allowing external access to the application without requiring direct VPC-to-VPC connectivity. This approach ensures isolation and avoids conflicts due to overlapping IP spaces. The company can deploy a VPC endpoint in VPC-A to connect to the VPC endpoint service in VPC-B. This setup allows EC2 instances in VPC-A to securely connect to the web application in VPC-B without modifying existing routing or NAT configurations.
Community Discussion
No community discussion yet for this question.