Examkin

Soru

Zorluk: OrtaAWS Network Services

An enterprise is migrating its operations to AWS and plans to deploy separate Amazon VPCs for fifty different business units. The network team wants to establish a hub-and-spoke topology to easily manage routing between these VPCs without creating a complex point-to-point mesh. Additionally, they must apply stateless traffic filtering at the boundary of each subnet. Which combination of AWS networking components should the team use to meet these requirements?

  1. AWS Transit Gateway and Network Access Control ListsCevap
  2. B
    VPC Peering and Security Groups
  3. C
    AWS Transit Gateway and Security Groups
  4. D
    VPC Peering and Network Access Control Lists

Cevap

AWS Transit Gateway and Network Access Control Lists
The correct answer combines AWS Transit Gateway and Network Access Control Lists. AWS Transit Gateway functions as a centralized router that easily connects multiple VPCs in a hub-and-spoke topology, avoiding the management overhead of point-to-point peering. Network Access Control Lists operate at the subnet boundary to inspect and filter inbound and outbound traffic statelessly.

Adım Adım Çözüm

1
Analyze the VPC interconnection requirement.
Since there are fifty VPCs and the organization wants a hub-and-spoke topology rather than a complex mesh of point-to-point connections, AWS Transit Gateway is the correct service because it acts as a central regional transit hub.
VPC Peering does not support transitive routing and requires N(N−1)/2N(N-1)/2 connections, which would mean 1,2251,225 peering connections for fifty VPCs.
2
Analyze the subnet-level traffic filtering requirement.
Since the security team requires stateless traffic filtering at the boundary of each subnet, Network Access Control Lists (NACLs) are the correct choice.
NACLs operate at the subnet boundary and are stateless, whereas Security Groups operate at the instance/ENI level and are stateful.

Anahtar Kavram

AWS Transit Gateway provides centralized routing for multi-VPC architectures, while Network Access Control Lists offer stateless security filtering at the subnet boundary.
Bu soruyu puanla

Konular

AWS Network Services

Bu konudan daha fazla soru