Examkin

Question

Difficulty: EasyHybrid and Multi-Account Network Connectivity Design

A retail company has three AWS accounts, each with a single VPC in the us-east-1 Region. The company wants to establish hybrid connectivity between all three VPCs and its on-premises data center using a single AWS Direct Connect connection. The architecture must allow the VPCs to communicate with the on-premises network and with each other. Which architecture achieves this with the least administrative effort?

  1. A
    Create an AWS Direct Connect Gateway, attach a Virtual Private Gateway to each VPC, and associate the Direct Connect Gateway with all three Virtual Private Gateways to enable routing between the VPCs and the on-premises environment.
  2. B
    Create a full mesh of VPC peering connections between all three VPCs to enable inter-VPC traffic. Create a Direct Connect Gateway, attach a Virtual Private Gateway to each VPC, and connect it using a private virtual interface (private VIF).
  3. Create an AWS Transit Gateway, attach the three VPCs, associate the Transit Gateway with an AWS Direct Connect Gateway, and connect the Direct Connect Gateway to the on-premises environment using a transit virtual interface (transit VIF).Answer
  4. D
    Deploy a single NAT Gateway in one of the VPCs, establish a VPN connection from that NAT Gateway to the on-premises data center, and route all traffic from the other two VPCs through the NAT Gateway.

Answer

Create an AWS Transit Gateway, attach the three VPCs, associate the Transit Gateway with an AWS Direct Connect Gateway, and connect the Direct Connect Gateway to the on-premises environment using a transit virtual interface (transit VIF).
AWS Transit Gateway functions as a centralized cloud router that simplifies network topologies. By attaching the three VPCs to a Transit Gateway, inter-VPC traffic is enabled natively. Connecting the Transit Gateway to an AWS Direct Connect Gateway using a transit virtual interface (transit VIF) allows all attached VPCs to access the on-premises data center over a single Direct Connect connection, minimizing both administrative overhead and configuration complexity.

Step-by-Step Solution

1
Evaluate the requirement for VPC-to-VPC and VPC-to-on-premises transitive routing.
Identify that AWS Transit Gateway is the appropriate service to enable transitive routing across multiple VPCs and a hybrid connection.
Direct Connect Gateway alone does not support routing traffic between attached virtual private gateways (VPCs).
2
Determine the connection type required between AWS Transit Gateway and AWS Direct Connect Gateway.
Select a transit virtual interface (transit VIF) for the Direct Connect connection.
A transit VIF is required to carry traffic between a Direct Connect Gateway and an AWS Transit Gateway.

Key Concept

Hybrid network design using AWS Transit Gateway and AWS Direct Connect Gateway for transitive multi-VPC routing.
Estimated Time:1m 0s
Rate this question

Topics

Hybrid and Multi-Account Network Connectivity Design

More questions from this topic