Examkin

Question

Difficulty: MediumHigh-Performing and Scalable Network Architectures

An enterprise is planning a high-performance hybrid network architecture to connect their on-premises data center with two AWS Regions: us-east-1 and us-west-2. The company has an existing on-premises network with a 10 Gbps10\text{ Gbps} dedicated line. The new setup must support a continuous data replication stream of at least 5 Gbps5\text{ Gbps} between the on-premises database and multiple Amazon VPCs in both regions, while minimizing latency and routing complexity. Which combination of AWS networking components should a solutions architect recommend to meet these requirements? (Select TWO.)

  1. Provision an AWS Direct Connect connection and configure a Direct Connect Gateway.Answer
  2. Create an AWS Transit Gateway in each region and associate them with the Direct Connect Gateway to connect the VPCs.Answer
  3. C
    Establish a single AWS Site-to-Site VPN connection to route the replication traffic over the public internet.
  4. D
    Implement stateful Network Access Control Lists (NACLs) to dynamically route and balance traffic between the regions.
  5. E
    Configure Amazon Route 53 latency-based routing policies to distribute the database replication traffic directly across the VPN connections.

Answer

Establish an AWS Direct Connect connection associated with a Direct Connect Gateway, and configure AWS Transit Gateway in each region to connect the VPCs to the Direct Connect Gateway.
The correct solution combines AWS Direct Connect, Direct Connect Gateway, and AWS Transit Gateway. AWS Direct Connect provides the necessary physical network bandwidth (10 Gbps10\text{ Gbps}) to easily support the 5 Gbps5\text{ Gbps} replication stream. The Direct Connect Gateway enables connectivity to multiple VPCs across different AWS Regions, while AWS Transit Gateway simplifies the architecture by serving as a centralized hub to consolidate VPC routing within each region.

Step-by-Step Solution

1
Evaluate the throughput requirement of 5 Gbps5\text{ Gbps} against connection options.
AWS Site-to-Site VPN is ruled out as a primary link because a single tunnel is limited to 1.25 Gbps1.25\text{ Gbps}. A dedicated AWS Direct Connect link (10 Gbps10\text{ Gbps} port) is selected to meet the bandwidth and performance needs.
Direct Connect ensures dedicated, reliable, and high-throughput connectivity without internet congestion.
2
Determine the routing mechanism to connect multiple VPCs across two different AWS Regions.
Establish a Direct Connect Gateway and attach a Transit Gateway from each region (us-east-1 and us-west-2) to the Direct Connect Gateway.
Direct Connect Gateway allows a single Direct Connect connection to access VPCs across multiple regions. Transit Gateway simplifies the routing mesh by aggregating VPC connections within each region.

Key Concept

High-Performing and Scalable Hybrid Network Architectures using Direct Connect and Transit Gateway
Estimated Time:2m 0s
Rate this question

Topics

High-Performing and Scalable Network Architectures

More questions from this topic