SAP-C02 · Question #376
A company is migrating some of its applications to AWS. The company wants to migrate and modernize the applications quickly after it finalizes networking and security strategies. The company has set…
The correct answer is B. Create a Direct Connect gateway and a transit gateway in the central network account. Attach the D. Share the transit gateway with other accounts. Attach VPCs to the transit gateway. F. Provision only private subnets. Open the necessary route on the transit gateway and customer. To meet the requirements, a Direct Connect gateway and a transit gateway should be set up in the central network account (B). The transit gateway should be shared with other accounts and VPCs should be attached to the transit gateway (D). Finally, only private subnets should be…
Question
A company is migrating some of its applications to AWS. The company wants to migrate and modernize the applications quickly after it finalizes networking and security strategies. The company has set up an AWS Direct Connection connection in a central network account. The company expects to have hundreds of AWS accounts and VPCs in the near future. The corporate network must be able to access the resources on AWS seamlessly and also must be able to communicate with all the VPCs. The company also wants to route its cloud resources to the internet through its on-premises data center. Which combination of steps will meet these requirements? (Choose three.)
Options
- ACreate a Direct Connect gateway in the central account. In each of the accounts, create an
- BCreate a Direct Connect gateway and a transit gateway in the central network account. Attach the
- CProvision an internet gateway. Attach the internet gateway to subnets. Allow internet traffic
- DShare the transit gateway with other accounts. Attach VPCs to the transit gateway.
- EProvision VPC peering as necessary.
- FProvision only private subnets. Open the necessary route on the transit gateway and customer
How the community answered
(20 responses)- A35% (7)
- B45% (9)
- C5% (1)
- E15% (3)
Explanation
To meet the requirements, a Direct Connect gateway and a transit gateway should be set up in the central network account (B). The transit gateway should be shared with other accounts and VPCs should be attached to the transit gateway (D). Finally, only private subnets should be provisioned, and a route should be opened on the transit gateway and customer gateway to allow outbound internet traffic from AWS to flow through NAT services that run in the data center (F). For more information, you can refer to the AWS documentation on Direct Connect Gateways, Transit Gateways and NAT Gateways. Additionally, the AWS Certified Solutions Architect - Professional Official Amazon Textbook and Resources can provide more in-depth information on
Community Discussion
No community discussion yet for this question.