SAP-C02 · Question #119
A company has an organization in AWS Organizations that has a large number of AWS accounts. One of the AWS accounts is designated as a transit account and has a transit gateway that is shared with all
Sign in or unlock SAP-C02 to reveal the answer and full explanation for question #119. The question stem and answer options stay visible for context.
Question
A company has an organization in AWS Organizations that has a large number of AWS accounts. One of the AWS accounts is designated as a transit account and has a transit gateway that is shared with all of the other AWS accounts AWS Site-to-Site VPN connections are configured between all of the company's global offices and the transit account. The company has AWS Config enacted on all of its accounts. The company's networking team needs to centrally manage a list of internal IP address ranges that belong to the global offices. Developers will reference this list to gain access to their applications Securely. Which solution meets these requirements with the LEAST amount of operational overhead?
Options
- ACreate a JSON file that is hosted in Amazon S3 and that lists all of the internal IP address ranges.
- BCreate a new AWS Config managed rule that contains all of the internal IP address ranges.
- CIn the transit account, create a VPC prefix list with all of the internal IP address ranges.
- DIn the transit account, create a security group with all of the internal IP address ranges.
Unlock SAP-C02 to see the answer
You've previewed enough free SAP-C02 questions. Unlock SAP-C02 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.