Examice

Exam SAP-C02 All QuestionsBrowse all questions from this exam

Question 430

A company provides a centralized Amazon EC2 application hosted in a single shared VPC. The centralized application must be accessible from client applications running in the VPCs of other business units. The centralized application front end is configured with a Network Load Balancer (NLB) for scalability.

Up to 10 business unit VPCs will need to be connected to the shared VPC. Some of the business unit VPC CIDR blocks overlap with the shared VPC, and some overlap with each other Network connectivity to the centralized application in the shared VPC should be allowed from authorized business unit VPCs only.

Which network configuration should a solutions architect use to provide connectivity from the client applications in the business unit VPCs to the centralized application in the shared VPC?

Create an AWS Transit Gateway. Attach the shared VPC and the authorized business unit VPCs to the transit gateway. Create a single transit gateway route table and associate it with all of the attached VPCs. Allow automatic propagation of routes from the attachments into the route table. Configure VPC routing tables to send traffic to the transit gateway.

Create a VPC endpoint service using the centralized application NLB and enable the option to require endpoint acceptance. Create a VPC endpoint in each of the business unit VPCs using the service name of the endpoint service. Accept authorized endpoint requests from the endpoint service console.

Create a VPC peering connection from each business unit VPC to the shared VPAccept the VPC peering connections from the shared VPC console. Configure VPC routing tables to send traffic to the VPC peering connection.

Configure a virtual private gateway for the shared VPC and create customer gateways for each of the authorized business unit VPCs. Establish a Site-to-Site VPN connection from the business unit VPCs to the shared VPC. Configure VPC routing tables to send traffic to the VPN connection.

Correct Answer: B

To provide connectivity from client applications in the business unit VPCs to the centralized application in the shared VPC, especially when the CIDR blocks of the VPCs overlap, the best solution is to create a VPC endpoint service using the centralized application NLB and enable the option to require endpoint acceptance. Then, create a VPC endpoint in each of the business unit VPCs using the service name of the endpoint service, and accept authorized endpoint requests from the endpoint service console. This configuration allows for secure and controlled access to the centralized application despite the overlapping IP addresses.

Discussion

sat2008

B is the answer for me Only way to get around overlapping IP range is using endpoint service

kejamOption: B

https://www.examtopics.com/discussions/amazon/view/46708-exam-aws-certified-solutions-architect-professional-topic-1/ https://aws.amazon.com/blogs/networking-and-content-delivery/connecting-networks-with-overlapping-ip-ranges/

alexis123456

Correct Answer is A

arberodOption: B

B is the answer

HunkyBunkyOption: B

Answer is B Application already uses NLB so this is a best way for solve that task

MoghiteOption: B

only option to get around of IP overlapping https://aws.amazon.com/blogs/networking-and-content-delivery/connecting-networks-with-overlapping-ip-ranges/

43c89f4

A is actually. they never mentioned cost effect or less effort solution. when they are not mentioned anything we need to prefer best option

sarlos

Not possible, because TGW does not support overlapping ranges

toma

"This requires that automatic route propagation to Transit Gateway be disabled as not all of the subnets in each VPC should be advertised." so it is B

career360guruOption: B

option B

master9Option: B

VPC Endpoint Service can do the job