SAP-C02 Question #252: Real Exam Question with Answer & Explanation

Question

A company uses AWS Cloud Formation to deploy applications within multiple VPCs that are all attached to a transit gateway. Each VPC that sends traffic to the public internet must send the traffic through a shared services VPC. Each subnet within a VPC uses the default VPC route table, and the traffic is routed to the transit gateway. The transit gateway uses its default route table for any VPC attachment. A security audit reveals that an Amazon EC2 instance that is deployed within a VPC can communicate with an EC2 instance that is deployed in any of the company's other VPCs. A solutions architect needs to limit the traffic between the VPCs. Each VPC must be able to communicate only with a predefined, limited set of authorized VPCs. What should the solutions architect do to meet these requirements?

Options

• AUpdate the network ACL of each subnet within a VPC to allow outbound traffic only to the
• BUpdate all the security groups that are used within a VPC to deny outbound traffic to security
• CCreate a dedicated transit gateway route table for each VPC attachment.
• DUpdate the main route table of each VPC to route traffic only to the authorized VPCs through the