Examice

Exam SAP-C02 All QuestionsBrowse all questions from this exam

Question 521

A company in the United States (US) has acquired a company in Europe. Both companies use the AWS Cloud. The US company has built a new application with a microservices architecture. The US company is hosting the application across five VPCs in the us-east-2 Region. The application must be able to access resources in one VPC in the eu-west-1 Region.

However, the application must not be able to access any other VPCs.

The VPCs in both Regions have no overlapping CIDR ranges. All accounts are already consolidated in one organization in AWS Organizations.

Which solution will meet these requirements MOST cost-effectively?

Create one transit gateway in eu-west-1. Attach the VPCs in us-east-2 and the VPC in eu-west-1 to the transit gateway. Create the necessary route entries in each VPC so that the traffic is routed through the transit gateway.

Create one transit gateway in each Region. Attach the involved subnets to the regional transit gateway. Create the necessary route entries in the associated route tables for each subnet so that the traffic is routed through the regional transit gateway. Peer the two transit gateways.

Create a full mesh VPC peering connection configuration between all the VPCs. Create the necessary route entries in each VPC so that the traffic is routed through the VPC peering connection.

Create one VPC peering connection for each VPC in us-east-2 to the VPC in eu-west-1. Create the necessary route entries in each VPC so that the traffic is routed through the VPC peering connection.

Correct Answer: D

The most cost-effective solution is to create a VPC peering connection for each VPC in us-east-2 to the VPC in eu-west-1. This approach allows the application to access resources in the specified VPC in eu-west-1 without needing a complex and costly setup like transit gateways, which are more expensive and may introduce unnecessary complexity for this use case. Given that the VPCs in both regions have no overlapping CIDR blocks and the requirement is to restrict access to only one VPC, VPC peering is both a simple and cost-effective method to meet these requirements.

Discussion

ahrentomOption: D

is most cost-effectively