SAP-C02 Exam - Question 339

Question

A company operates a fleet of servers on premises and operates a fleet of Amazon EC2 instances in its organization in AWS Organizations. The company's AWS accounts contain hundreds of VPCs. The company wants to connect its AWS accounts to its on-premises network. AWS Site-to-Site VPN connections are already established to a single AWS account. The company wants to control which VPCs can communicate with other VPCs.

Which combination of steps will achieve this level of control with the LEAST operational effort? (Choose three.)

Examice · Accepted Answer

To achieve control over VPC communication with the least operational effort, the following combination of steps is necessary: First, create a transit gateway in an AWS account and share it across accounts using AWS Resource Access Manager (AWS RAM). This allows centralized control over network connectivity. Second, configure attachments to all VPCs and VPNs, which involves attaching each VPC and VPN to the transit gateway, thereby enabling connectivity through the gateway. Lastly, set up transit gateway route tables and associate the VPCs and VPNs with the route tables, which will allow fine-grained control over the routing between different VPCs and the on-premises network. This setup avoids the need for complex VPC peering arrangements and manual route table updates in individual VPCs.

HappyPrince · Answer

As transit gateway follows a hub and spoke model connecting all VPCs and VPNs to it makes more sense. Moreover, between VPCs and VPNs is invalid.

HunkyBunky · Answer

I guess ACE. The company wants to control which  VPC will communicate with other VPC, that means that we don't need to setup attachment for all VPCs

devalenzuela86 · Answer

ABC for sure

career360guru · Answer

Option A, B, C. Option E looks feasible instead of B but that is not a requirement as company only wants to control VPC to VPC communication.

hogtrough · Answer

E. You don't configure attachments between VPCs and VPNs, you configure attachments to both VPCs and VPN from the transit gateway, thus B.

jpes · Answer

i'd go for abc as well.

shaaam80 · Answer

Answer - ABC

ayadmawla · Answer

ABC - we need to read the answers as a combination of steps.

salazar35 · Answer

I guess ACE

shaaam80 · Answer

ACE. Option B mentions attaching 'all' VPCs, might not suggest control of what VPCs the company wants to include communcation

tmlong18 · Answer

I go ABC

VerRi · Answer

We don't need "all"

seetpt · Answer

ABC for me

vibzr2023 · Answer

My Answer "ACE" Why B is correct? The question asks "The company wants to control which VPCs can communicate with other VPCs" Saying that Option B is "Involves attaching every single VPC and VPN within the organization directly to the Transit Gateway" where as Option C focuses on "establishing attachments only between the VPCs that need to communicate with each other and the VPN gateway" 
Can one explain why B is correct?

arberod · Answer

It is ACE

053081f · Answer

The question and opitons include (or lack) some typo errors.

E should be "Configure 'transit gateway' attachments between the VPCs and VPNs."

Then, I think ABE is correct, not ABC.

The company wants to control "which VPCs can communicate with other VPCs." It doesn't say "all VPCs and VPNs.".

SAP-C02 Exam - Question 339

Discussion