SAP-C02 · Question #546
A company uses AWS CloudFormation to deploy applications within multiple VPCs that are all attached to a transit gateway. Each VPC that sends traffic to the public internet must send the traffic…
The correct answer is C. Create a dedicated transit gateway route table for each VPC attachment. Route traffic only to the. Option C suggests creating a dedicated transit gateway route table for each VPC attachment. This allows fine-grained control over the routing of traffic between VPCs. By creating separate route tables, the architect can specify the allowed routes for each VPC attachment and…
Question
A company uses AWS CloudFormation to deploy applications within multiple VPCs that are all attached to a transit gateway. Each VPC that sends traffic to the public internet must send the traffic through a shared services VPC. Each subnet within a VPC uses the default VPC route table, and the traffic is routed to the transit gateway. The transit gateway uses its default route table for any VPC attachment. A security audit reveals that an Amazon EC2 instance that is deployed within a VPC can communicate with an EC2 instance that is deployed in any of the company's other VPCs. A solutions architect needs to limit the traffic between the VPCs. Each VPC must be able to communicate only with a predefined, limited set of authorized VPCs. What should the solutions architect do to meet these requirements?
Options
- AUpdate the network ACL of each subnet within a VPC to allow outbound traffic only to the
- BUpdate all the security groups that are used within a VPC to deny outbound traffic to security
- CCreate a dedicated transit gateway route table for each VPC attachment. Route traffic only to the
- DUpdate the main route table of each VPC to route traffic only to the authorized VPCs through the
How the community answered
(26 responses)- A8% (2)
- B19% (5)
- C46% (12)
- D27% (7)
Explanation
Option C suggests creating a dedicated transit gateway route table for each VPC attachment. This allows fine-grained control over the routing of traffic between VPCs. By creating separate route tables, the architect can specify the allowed routes for each VPC attachment and limit traffic to only the authorized VPCs. This approach ensures that communication between VPCs is restricted and provides a secure and controlled network environment.
Community Discussion
No community discussion yet for this question.