SAP-C02 · Question #252
A company uses AWS Cloud Formation to deploy applications within multiple VPCs that are all attached to a transit gateway. Each VPC that sends traffic to the public internet must send the traffic…
The correct answer is C. Create a dedicated transit gateway route table for each VPC attachment. Q: How do I control which Amazon Virtual Private Clouds (VPCs) can communicate with each You can segment your network by creating multiple route tables in an AWS Transit Gateway and associate Amazon VPCs and VPNs to them. This will allow you to create isolated networks inside…
Question
A company uses AWS Cloud Formation to deploy applications within multiple VPCs that are all attached to a transit gateway. Each VPC that sends traffic to the public internet must send the traffic through a shared services VPC. Each subnet within a VPC uses the default VPC route table, and the traffic is routed to the transit gateway. The transit gateway uses its default route table for any VPC attachment. A security audit reveals that an Amazon EC2 instance that is deployed within a VPC can communicate with an EC2 instance that is deployed in any of the company's other VPCs. A solutions architect needs to limit the traffic between the VPCs. Each VPC must be able to communicate only with a predefined, limited set of authorized VPCs. What should the solutions architect do to meet these requirements?
Options
- AUpdate the network ACL of each subnet within a VPC to allow outbound traffic only to the
- BUpdate all the security groups that are used within a VPC to deny outbound traffic to security
- CCreate a dedicated transit gateway route table for each VPC attachment.
- DUpdate the main route table of each VPC to route traffic only to the authorized VPCs through the
How the community answered
(51 responses)- A6% (3)
- B10% (5)
- C61% (31)
- D24% (12)
Explanation
Q: How do I control which Amazon Virtual Private Clouds (VPCs) can communicate with each You can segment your network by creating multiple route tables in an AWS Transit Gateway and associate Amazon VPCs and VPNs to them. This will allow you to create isolated networks inside an AWS Transit Gateway similar to virtual routing and forwarding (VRFs) in traditional networks. The AWS Transit Gateway will have a default route table. The use of multiple route tables is
Community Discussion
No community discussion yet for this question.