nerdexam
Amazon

SAP-C02 · Question #709

A company uses AWS Organizations to manage its development environment. Each development team at the company has its own AWS account. Each account has a single VPC and CIDR blocks that do not overlap.

The correct answer is B. Create a transit gateway in the shared services account. Create an AWS Resource Access. AWS PrivateLink requires an NLB (Network Load Balancer). Since the question mentions that IP addresses should not overlap, sharing via Transit Gateway might be a good approach.

Submitted by chen.hong· Mar 6, 2026Design Solutions for Organizational Complexity

Question

A company uses AWS Organizations to manage its development environment. Each development team at the company has its own AWS account. Each account has a single VPC and CIDR blocks that do not overlap. The company has an Amazon Aurora DB cluster in a shared services account. All the development teams need to work with live data from the DB cluster. Which solution will provide the required connectivity to the DB cluster with the LEAST operational overhead?

Options

  • ACreate an AWS Resource Access Manager (AWS RAM) resource share for the DB cluster. Share
  • BCreate a transit gateway in the shared services account. Create an AWS Resource Access
  • CCreate an Application Load Balancer (ALB) that points to the IP address of the DB cluster. Create
  • DCreate an AWS Site-to-Site VPN connection in the shared services account. Configure

How the community answered

(30 responses)
  • A
    23% (7)
  • B
    63% (19)
  • C
    3% (1)
  • D
    10% (3)

Explanation

AWS PrivateLink requires an NLB (Network Load Balancer). Since the question mentions that IP addresses should not overlap, sharing via Transit Gateway might be a good approach.

Community Discussion

No community discussion yet for this question.

Full SAP-C02 Practice