nerdexam
CompTIA

CV0-003 · Question #827

A company is planning its cloud architecture and wants to use a VPC for each of its three products per environment in two regions, totaling 18 VPCs. The products have interdependencies, consuming serv

The correct answer is C. Hub and spoke. A hub-and-spoke topology uses a central transit VPC to interconnect many spoke VPCs, scaling efficiently for 18 VPCs with transitive routing - something VPC peering alone cannot provide.

Cloud Architecture and Design

Question

A company is planning its cloud architecture and wants to use a VPC for each of its three products per environment in two regions, totaling 18 VPCs. The products have interdependencies, consuming services between VPCs. Which of the following should the cloud architect use to connect all the VPCs?

Options

  • AMPLS connections
  • BVPC peering
  • CHub and spoke
  • DVPN connections

How the community answered

(49 responses)
  • A
    27% (13)
  • B
    10% (5)
  • C
    57% (28)
  • D
    6% (3)

Why each option

A hub-and-spoke topology uses a central transit VPC to interconnect many spoke VPCs, scaling efficiently for 18 VPCs with transitive routing - something VPC peering alone cannot provide.

AMPLS connections

MPLS is a WAN technology used to connect on-premises or carrier networks and is not a native cloud VPC interconnect mechanism.

BVPC peering

VPC peering does not support transitive routing, meaning traffic cannot flow through an intermediary VPC, making full connectivity across 18 interdependent VPCs require an unmanageable number of individual peering relationships.

CHub and spokeCorrect

Hub and spoke places a central hub VPC (often a transit gateway or VNet hub) through which all spoke VPCs route traffic, enabling transitive connectivity so any VPC can reach any other through the hub. With 18 VPCs and cross-product interdependencies, this model requires only n connections to the hub rather than the n*(n-1)/2 peering connections that full-mesh peering would need, making it far more manageable and scalable.

DVPN connections

VPN connections are designed primarily to link on-premises networks to cloud environments over encrypted tunnels and are not the optimal solution for connecting multiple VPCs within a cloud provider.

Concept tested: Scalable multi-VPC connectivity using hub-and-spoke topology

Source: https://docs.aws.amazon.com/vpc/latest/tgw/what-is-transit-gateway.html

Topics

#hub and spoke#VPC peering#network topology#multi-VPC design

Community Discussion

No community discussion yet for this question.

Full CV0-003 Practice