Examkin

Soru

Zorluk: OrtaAWS Network Services

A company is migrating its operations to AWS and plans to deploy dozens of Virtual Private Clouds (VPCs) across multiple AWS accounts to isolate different departments. They need to simplify their network architecture by interconnecting all these VPCs through a central hub, avoiding a complex point-to-point routing mesh. Additionally, they must implement stateless traffic filtering at the subnet boundary to block traffic from specific IP addresses. Which two AWS networking solutions or features should the company implement to meet these requirements?

  1. AWS Transit GatewayCevap
  2. Network Access Control Lists (Network ACLs)Cevap
  3. C
    VPC Peering
  4. D
    Security Groups
  5. E
    AWS CloudTrail

Cevap

AWS Transit Gateway and Network Access Control Lists (Network ACLs)
AWS Transit Gateway is the correct solution for interconnecting dozens of VPCs via a centralized hub, simplifying the network architecture. Network Access Control Lists (Network ACLs) are the correct choice for implementing stateless traffic filtering at the subnet boundary to block specific IP addresses.

Adım Adım Çözüm

1
Identify the service required to interconnect dozens of VPCs through a central hub rather than a point-to-point mesh.
AWS Transit Gateway acts as a central cloud router, providing a hub-and-spoke topology to simplify multi-VPC routing.
VPC Peering does not scale easily for dozens of VPCs as it requires a full mesh of individual connections.
2
Identify the feature required to implement stateless traffic filtering at the subnet boundary.
Network Access Control Lists (Network ACLs) operate at the subnet level and support stateless allow and deny rules.
Security Groups are stateful and operate at the instance level, not the subnet level.

Anahtar Kavram

VPC connectivity scaling using AWS Transit Gateway and subnet-level security using Network ACLs
Bu soruyu puanla

Konular

AWS Network Services

Bu konudan daha fazla soru