SAP-C02 · Question #277
Example Corp. has an on-premises data center and a VPC named VPC A in the Example Corp. AWS account. The on-premises network connects to VPC A through an AWS Site-To-Site VPN. The on-premises…
The correct answer is A. Create a transit gateway. Attach the Site-to-Site VPN, VPC A, and VPC B to the transit gateway. This option will allow you to connect from the on-premises servers to VPC B with the least operational effort, as it utilizes the transit gateway to connect all networks and allows for easy updates to the route tables. BGP propagation is not necessary and the use of transit…
Question
Example Corp. has an on-premises data center and a VPC named VPC A in the Example Corp. AWS account. The on-premises network connects to VPC A through an AWS Site-To-Site VPN. The on-premises servers can properly access VPC A. Example Corp. just acquired AnyCompany, which has a VPC named VPC B. There is no IP address overlap among these networks. Example Corp. has peered VPC A and VPC B. Example Corp. wants to connect from its on-premise servers to VPC B. Example Corp. has properly set up the network ACL and security groups. Which solution will meet this requirement with the LEAST operational effort?
Options
- ACreate a transit gateway. Attach the Site-to-Site VPN, VPC A, and VPC B to the transit gateway.
- BCreate a transit gateway. Create a Site-to-Site VPN connection between the on-premises network
- CUpdate the route tables for the Site-to-Site VPN and both VPCs for all three networks. Configure
- DModify the Site-to-Site VPN's virtual private gateway definition to include VPC A and VPC B. Split
How the community answered
(21 responses)- A67% (14)
- B5% (1)
- C19% (4)
- D10% (2)
Explanation
This option will allow you to connect from the on-premises servers to VPC B with the least operational effort, as it utilizes the transit gateway to connect all networks and allows for easy updates to the route tables. BGP propagation is not necessary and the use of transit gateway will simplify the traffic routing.
Community Discussion
No community discussion yet for this question.