SAP-C02 Question #439: Real Exam Question with Answer & Explanation

Question

A company has multiple business units that each have separate accounts on AWS. Each business unit manages its own network with several VPCs that have CIDR ranges that overlap. The company's marketing team has created a new internal application and wants to make the application accessible to all the other business units. The solution must use private IP addresses only. Which solution will meet these requirements with the LEAST operational overhead?

Options

• AInstruct each business unit to add a unique secondary CIDR range to the business unit's VPC.
• BCreate an Amazon EC2 instance to serve as a virtual appliance in the marketing account's VPC.
• CCreate an AWS PrivateLink endpoint service to share the marketing application. Grant permission
• DCreate a Network Load Balancer (NLB) in front of the marketing application in a private subnet.

Explanation

With AWS PrivateLink, the marketing team can create an endpoint service to share their internal application with other accounts securely using private IP addresses. They can grant permission to specific AWS accounts to connect to the service and create interface VPC endpoints in the other accounts to access the application by using private IP addresses. This option does not require any changes to the network of the other business units, and it does not require peering or NATing. This solution is both scalable and secure.

No community discussion yet for this question.