Examkin

Question

Difficulty: MediumAWS Network Services

A company is migrating its operations to AWS and plans to deploy dozens of Virtual Private Clouds (VPCs) across multiple AWS accounts to isolate different departments. They need to simplify their network architecture by interconnecting all these VPCs through a central hub, avoiding a complex point-to-point routing mesh. Additionally, they must implement stateless traffic filtering at the subnet boundary to block traffic from specific IP addresses. Which two AWS networking solutions or features should the company implement to meet these requirements?

  1. AWS Transit GatewayAnswer
  2. Network Access Control Lists (Network ACLs)Answer
  3. C
    VPC Peering
  4. D
    Security Groups
  5. E
    AWS CloudTrail

Answer

AWS Transit Gateway and Network Access Control Lists (Network ACLs)
AWS Transit Gateway is the correct solution for interconnecting dozens of VPCs via a centralized hub, simplifying the network architecture. Network Access Control Lists (Network ACLs) are the correct choice for implementing stateless traffic filtering at the subnet boundary to block specific IP addresses.

Step-by-Step Solution

1
Identify the service required to interconnect dozens of VPCs through a central hub rather than a point-to-point mesh.
AWS Transit Gateway acts as a central cloud router, providing a hub-and-spoke topology to simplify multi-VPC routing.
VPC Peering does not scale easily for dozens of VPCs as it requires a full mesh of individual connections.
2
Identify the feature required to implement stateless traffic filtering at the subnet boundary.
Network Access Control Lists (Network ACLs) operate at the subnet level and support stateless allow and deny rules.
Security Groups are stateful and operate at the instance level, not the subnet level.

Key Concept

VPC connectivity scaling using AWS Transit Gateway and subnet-level security using Network ACLs
Rate this question

Topics

AWS Network Services

More questions from this topic