ANS-C01 · Question #81
A company is migrating its containerized application to AWS. For the architecture the company will have an ingress VPC with a Network Load Balancer (NLB) to distribute the traffic to front-end pods…
The correct answer is C. Create a VPC peering connection between the ingress VPC and each of the 10 services VPCs. VPC peering offers the lowest overall cost when compared to other options for inter-VPC https://docs.aws.amazon.com/whitepapers/latest/building-scalable-secure-multi-vpc-network- infrastructure/vpc-to-vpc-connectivity.html There is no such thing as "TG peering"; there are VPC…
Question
A company is migrating its containerized application to AWS. For the architecture the company will have an ingress VPC with a Network Load Balancer (NLB) to distribute the traffic to front-end pods in an Amazon Elastic Kubernetes Service (Amazon EKS) cluster. The front end of the application will determine which user is requesting access and will send traffic to 1 of 10 services VPCs. Each services VPC will include an NLB that distributes traffic to the services pods in an EKS cluster. The company is concerned about overall cost. User traffic will be responsible for more than 10 TB of data transfer from the ingress VPC to services VPCs every month. A network engineer needs to recommend how to design the communication between the VPCs. Which solution will meet these requirements at the LOWEST cost?
Options
- ACreate a transit gateway. Peer each VPC to the transit gateway. Use zonal DNS names for the
- BCreate an AWS PrivateLink endpoint in every Availability Zone in the ingress VPC. Each
- CCreate a VPC peering connection between the ingress VPC and each of the 10 services VPCs.
- DCreate a transit gateway. Peer each VPC to the transit gateway. Turn off cross-AZ load balancing
How the community answered
(65 responses)- A11% (7)
- B25% (16)
- C58% (38)
- D6% (4)
Explanation
VPC peering offers the lowest overall cost when compared to other options for inter-VPC https://docs.aws.amazon.com/whitepapers/latest/building-scalable-secure-multi-vpc-network- infrastructure/vpc-to-vpc-connectivity.html There is no such thing as "TG peering"; there are VPC peering and TG attachments.
Topics
Community Discussion
No community discussion yet for this question.