Examkin

Question

Difficulty: MediumAWS Network Services

A company is expanding its infrastructure from a single Virtual Private Cloud (VPC) to a multi-VPC environment across multiple AWS accounts. The network engineering team needs to design a solution that satisfies two requirements: First, all VPCs must be connected through a centralized hub to simplify routing management and avoid a complex mesh of point-to-point connections. Second, network traffic entering or leaving specific subnets within each VPC must be filtered in a stateless manner. Which combination of AWS services or features should the company use to meet these requirements?

  1. A
    VPC Peering and Security Groups
  2. AWS Transit Gateway and Network Access Control Lists (Network ACLs)Answer
  3. C
    AWS Transit Gateway and Security Groups
  4. D
    VPC Peering and Network Access Control Lists (Network ACLs)

Answer

AWS Transit Gateway and Network Access Control Lists (Network ACLs)
The combination of AWS Transit Gateway and Network Access Control Lists (Network ACLs) is correct because AWS Transit Gateway operates as a centralized cloud router to simplify traffic management across multiple VPCs and accounts, while Network ACLs are configured at the subnet level to provide stateless traffic filtering.

Step-by-Step Solution

1
Identify the AWS networking service required to connect multiple VPCs through a centralized hub.
AWS Transit Gateway acts as a cloud router to centralize external and inter-VPC connections, avoiding the management complexity of a full mesh of VPC peering connections.
The scenario requires a centralized hub to simplify routing management across multiple VPCs.
2
Identify the VPC feature required to filter traffic in a stateless manner at the subnet level.
Network Access Control Lists (Network ACLs) operate at the subnet level and are stateless.
Security Groups are stateful and operate at the instance level, whereas Network ACLs are stateless and operate at the subnet boundary.
3
Select the option that combines both identified features.
The combination of AWS Transit Gateway and Network Access Control Lists (Network ACLs) satisfies both requirements.
This is the only configuration that provides centralized routing alongside stateless subnet-level filtering.

Key Concept

Using AWS Transit Gateway for centralized multi-VPC routing and Network Access Control Lists (Network ACLs) for stateless subnet-level security filtering.
Rate this question

Topics

AWS Network Services

More questions from this topic