Examkin

Question

Difficulty: MediumAWS Network Services

An enterprise needs to interconnect thirty virtual networks across multiple AWS accounts to enable communications between them. They also need to connect all these networks to their corporate office. To simplify management and avoid building a complex mesh of point-to-point paths, which two AWS networking options should they implement? (Select TWO.)

  1. A
    VPC Peering connections established between every pair of the thirty virtual networks.
  2. AWS Transit Gateway to act as a central hub for routing traffic between the networks.Answer
  3. C
    Security Groups applied at the subnet level to route traffic between the virtual networks.
  4. AWS Site-to-Site VPN or AWS Direct Connect attached to the central transit gateway to connect the corporate office.Answer
  5. E
    AWS CloudFormation templates deployed in each network to physically route the packets between subnets.

Answer

To connect multiple virtual networks and an on-premises network while avoiding a complex mesh, the enterprise should implement AWS Transit Gateway as a central hub and connect the corporate office using AWS Site-to-Site VPN or AWS Direct Connect attached to that transit gateway.
The correct options are AWS Transit Gateway and using a VPN or Direct Connect attachment to that gateway. AWS Transit Gateway acts as a cloud router, simplifying network management by connecting multiple VPCs and on-premises networks to a single hub. Attaching the hybrid connection directly to the transit gateway allows the corporate office to reach all connected VPCs without needing individual tunnels to each network.

Step-by-Step Solution

1
Identify the requirement to interconnect thirty networks and an on-premises office without creating a complex mesh of connections.
Recognized that point-to-point connections are unsuitable due to the complexity of a full-mesh topology.
Building point-to-point paths between many networks scales poorly and violates the constraint to avoid a complex mesh.
2
Select AWS Transit Gateway as the central hub to simplify the multi-VPC routing topology.
Chose AWS Transit Gateway to consolidate and manage traffic routing through a single hub.
AWS Transit Gateway acts as a centralized cloud router that simplifies connectivity for large numbers of VPCs.
3
Select AWS Site-to-Site VPN or AWS Direct Connect attached to the transit gateway to connect the on-premises office to all the networks.
Established secure hybrid connectivity to the centralized hub.
Attaching hybrid connectivity to the central gateway extends access to all connected networks via a single path.

Key Concept

AWS Transit Gateway and hybrid cloud connectivity.
Rate this question

Topics

AWS Network Services

More questions from this topic