An enterprise is designing a new multi-VPC environment in the `eu-west-1` Region. The architecture consists of three spoke VPCs (`vpc-finance-prod`, `vpc-hr-prod`, and `vpc-shared-services`) connected via an AWS Transit Gateway. The network design must satisfy the following requirements:
- Establish a primary, high-bandwidth connection using a dedicated AWS Direct Connect connection via a Direct Connect Gateway, and a backup AWS Site-to-Site VPN connection over the internet.
- Prevent asymmetric routing between the on-premises corporate network and AWS.
- Ensure secure, highly available, and cost-effective outbound internet egress for resources in all three VPCs.
- Provide private DNS resolution for a Private Hosted Zone (`corp.internal`) hosted in the `vpc-shared-services` account to all resources across the three VPCs.
Which of the following configuration steps should the solutions architect implement to satisfy these requirements? (Select TWO.)
- Configure the on-premises router to assign a higher BGP Local Preference to routes received via the Direct Connect Gateway compared to the Site-to-Site VPN, and propagate both connections into the AWS Transit Gateway route table.Cevap
- Deploy a NAT Gateway in each active Availability Zone within the public subnets of the shared services VPC for outbound egress, and perform Route 53 cross-account associations to associate the Private Hosted Zone with each individual spoke VPC.Cevap
- CDeploy a single NAT Gateway in the shared services VPC to route all internet-bound traffic from the spoke VPCs through the Transit Gateway to minimize monthly elastic IP and gateway hourly charges.
- DConfigure the Direct Connect Gateway to act as a transitive router, enabling the spoke VPCs to route inter-VPC traffic directly through the Direct Connect Gateway to optimize network path latency.
- EShare the Route 53 Private Hosted Zone with the other accounts using AWS Resource Access Manager (RAM) and associate it with the Transit Gateway to enable DNS resolution across all VPCs.